Customer information

ThermoFluid Studio account privacy notice

This notice supplements the ThermoFluid Studio Privacy Policy for optional website accounts. It does not change how the desktop application handles your projects: models, project files and calculation results stay on your computer.

When you request a sign-in code, we process your email address to deliver the code and establish that you control that email account. Supabase provides authentication and stores your email address, account identifier, registration and sign-in information, and authentication records. Resend delivers the requested sign-in emails and processes the recipient address and delivery information. Cloudflare operates the website and account service and processes network requests and abuse-prevention information. These providers process information under their applicable terms and privacy policies.

Signing in places an essential, secure account-session cookie in your browser for up to one hour. It is used for authentication, not advertising. Signing out clears the cookie on that browser. A copied session token may remain valid until it expires. Another sign-in code is needed when the session expires.

An account does not prove that you purchased a subscription. If you choose to link a purchase, you provide its license key. We send the key and the account email to Lemon Squeezy to verify the purchase and its ownership. We retain your account identifier, purchase and license identifiers, the product identifiers, and the time the purchase was linked. We do not store the full license key in the account database or return it in account-page responses. The page displays only its last four characters. Lemon Squeezy continues to handle billing, subscriptions and payment details under its own policies.

We use account and linked-purchase information to show your purchases, provide support, prevent conflicting purchase claims, and reconcile registrations and subscriptions. For private business reporting, limited account and purchase information may also be copied to an owner-restricted Google spreadsheet. That report can include an account email, registration date, purchase identifiers and subscription or license status. It does not contain license keys, sign-in codes, session tokens, card details or engineering project data. Access is restricted to the business owner and is not publicly shared.

We retain account information and purchase links while the account is in use and as needed to provide support, prevent abuse and meet applicable obligations. You can request access, correction or deletion by emailing support@thermofluidstudio.com. There is currently no self-service account-deletion or email-change feature. After verifying a deletion request, we remove the account and its purchase links and remove its personal rows from our private reporting. Provider backups and operational records may remain for their applicable retention periods. Deleting a website account does not cancel a subscription or erase payment records that Lemon Squeezy must retain; subscription cancellation remains available through the billing portal.

We do not sell account information or use it for advertising. Service providers may process information in countries other than your own under their applicable contractual safeguards. Questions about this account service or your information can be sent to support@thermofluidstudio.com.