ThermaCRM

Privacy Policy

Effective Date: October 19, 2026

ThermaCRM ("we," "us," or "our") operates the ThermaCRM application and the thermacrm.com website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Information We Collect

We may collect the following types of information:

  • Account Information: Name, email address, phone number, and business details you provide when creating an account.
  • Business Data: Customer records, job details, equipment records, maintenance programs, invoices, schedules, and other data you enter into the application.
  • Location Data: With your permission, we may collect location information from your device when you use certain features of the application, such as sharing your en-route location with a customer.
  • Usage Data: Information about how you interact with our services, including device information, browser type, and access times.
  • Device and Diagnostic Data: Crash reports and diagnostic information about the app and your device (device model, operating system version, app version, available memory and storage, and whether the device is rooted or jailbroken), together with app-generated device identifiers such as the Firebase installation ID. See Diagnostics, Device Identifiers, and Payment SDKs below.
  • Communications: Records of correspondence when you contact us for support or other inquiries.

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our services.
  • Process transactions and manage your account.
  • Respond to your inquiries and provide customer support.
  • Send service-related communications, such as updates and security alerts.
  • Improve and develop new features for our services.
  • Comply with legal obligations.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist in operating our services (e.g., cloud hosting on Amazon Web Services, payment processing via TalusPay and Stripe, crash reporting via Google Firebase Crashlytics), bound by confidentiality agreements and permitted to use the data only to provide their service to us.
  • Legal Requirements: When required by law, regulation, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users.

Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your information for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time by contacting us. We will retain and use your information as necessary to comply with legal obligations and resolve disputes.

Diagnostics, Device Identifiers, and Payment SDKs

The ThermaCRM mobile app includes third-party software development kits (SDKs) that transmit limited device and diagnostic data off your device. None of them collect your advertising ID, and we do not use any of this data for advertising or for tracking you across other companies' apps or websites.

  • Crash Reporting (Google Firebase Crashlytics): When the app crashes or encounters an unexpected error, a crash report is sent to Firebase Crashlytics, a service operated by Google. A report contains the stack trace, the app version, your device's model, operating system version, orientation, available memory and storage, whether the device is rooted or jailbroken, the time of the crash, and a Firebase installation ID — a random identifier Firebase generates for your installation of the app that is used to count affected devices and that is reset when you reinstall the app. We also attach your account's internal employee ID and company ID so that we can relate a crash to the account it affected and reach out to you if needed. Crash reports never include your customers' records, job details, invoices, messages, or location. Crash reporting is active on the iOS and Android apps only (not on the web app) and cannot be switched off in the app; Google retains crash data for 90 days.
  • Payments (TalusPay / Phos Tap to Pay and Stripe): When you use Tap to Pay, key in a card, or set up Pay Over Time, the payment processor's SDK collects the card data you enter or tap together with device information — device model, operating system version, app identifiers, an app-generated device identifier, and a root or jailbreak check — which the processor uses for payment authorization, fraud prevention, and the security attestation that card networks require for contactless acceptance. Card numbers are sent directly from the SDK to the processor and never reach our servers. This data is governed by the Stripe Privacy Policy and the TalusPay Privacy Policy.
  • How We Use It: To find and fix defects, to keep the app running reliably, and to process payments securely. We do not sell device or diagnostic data, and we do not combine it with data from other sources to build a profile of you.

These disclosures correspond to the "Data safety" section of our Google Play listing and the "App Privacy" section of our App Store listing, which list crash logs, diagnostics, device or other IDs, and user IDs as data the app collects.

Google User Data (Google Calendar Integration)

ThermaCRM offers an optional integration with Google Calendar. Connecting your Google Calendar is entirely optional and is off by default. If you choose to connect it, we handle your Google user data as follows:

  • What We Access: When you connect your Google Calendar, the app requests two Google permissions: access to the events on your own Google Calendar (the calendar.events.owned scope, via the Google Calendar API) and the email address of the Google account you connected (the userinfo.email scope). The email address is shown in the app's Calendar Sync settings so you can see which Google account is connected; it is used for nothing else.
  • How We Use It: We use this data solely to provide the calendar sync feature — writing your job appointments from ThermaCRM to your Google Calendar, and reading calendar changes back to keep your in-app schedule in sync. Google notifies our servers when events on your calendar change; we act only on the events the app created (updating the matching job's date and time) and discard every other event immediately.
  • Storage & Protection: OAuth access and refresh tokens are stored securely on our servers and are used only to perform the sync. We store the connected Google account's email address and, for each job the app has written to your calendar, the Google event ID that links it to the job. We do not store, log, or read the contents of any calendar event the app did not create. All of this is kept on servers in the United States, encrypted at rest and in transit, and is deleted when you disconnect Google Calendar or delete your account.
  • No Sale or Sharing: Google user data is never sold, and never shared with third parties, advertisers, or data brokers. It is not used for advertising, profiling, or any purpose other than the sync feature you enabled.

ThermaCRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who Operates It: ThermaCRM is the HVAC edition of the Tradesmen Tech platform built by Tradesmen Technologies, and the Google Calendar integration is operated by Tradesmen Technologies through a single Google API project shared by both apps. The Google consent screen therefore shows the Tradesmen Technologies name and links to the Tradesmen Technologies privacy policy at tradesmentechnologies.com, whose Google User Data section is identical to this one. Google user data connected from ThermaCRM is handled exactly as described here.

Revoking Access: You can disconnect Google Calendar at any time from the app's Calendar Sync settings, which revokes and deletes our stored tokens, or by removing access at https://myaccount.google.com/permissions. On disconnect, we delete the stored tokens and calendar event mappings.

Cookies & Analytics

We use cookies and similar technologies to operate our services and understand how they are used. We also use third-party analytics tools to help us measure traffic and usage trends. These tools may collect information such as pages visited, session duration, and general device or browser information. You can manage cookie preferences through your browser settings.

Your Rights

Depending on your location, you may have the right to:

  • Access, correct, or delete your personal information.
  • Object to or restrict certain processing of your data.
  • Request a portable copy of your data.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us using the information below.

SMS Messaging

Our platform sends SMS notifications — including appointment reminders, technician dispatch updates, and service completion notices — to end users on behalf of businesses that use our services. End users consent to receive these messages when they provide their phone number during the service booking process. Message and data rates may apply.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

End users may opt out of SMS messages at any time by replying STOP to any message. For help, reply HELP or contact us at support@thermacrm.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. If we change how the app accesses, uses, stores, or shares Google user data, we will also notify you before the change takes effect by email to your account address and by a notice in the app.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

support@thermacrm.com