Privacy Policy

HeatSync (“we,” “our,” or “us”) operates the HeatSync water heater diagnostic platform. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights with respect to it.

By using the Service you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

We use your information for the following purposes:

• removeProviding, operating, and improving the Service
• removeAuthenticating your account and maintaining security
• removeSaving and retrieving your job history and diagnostic results
• removeSending transactional emails (e.g., password reset, account notices)
• removeResponding to support requests
• removeAnalyzing usage patterns to improve product quality and reliability
• removeComplying with legal obligations

We share your information only in the limited circumstances described below:

We use strictly necessary cookies and session tokens to keep you signed in and to protect your account. These are essential for the Service to function and cannot be disabled.

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics that share your data with outside parties. We use self-hosted analytics solely to understand aggregate usage patterns.

You can clear cookies through your browser settings, but doing so will sign you out of the Service.

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include:

• removeEncryption of data in transit using TLS 1.2 or higher
• removeEncryption of sensitive data at rest
• removePassword hashing with bcrypt
• removeShort-lived access tokens with secure refresh-token rotation
• removeInfrastructure access limited to authorized personnel on a need-to-know basis

We retain your account information and job records for as long as your account is active or as needed to provide you with the Service.

If you delete your account, we will delete your personal information within 30 days, except where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

Anonymized, aggregated data (e.g., diagnostic-flow completion rates) may be retained indefinitely as it cannot reasonably be used to identify you.

Depending on your location, you may have the following rights with respect to your personal information:

• removeAccess: request a copy of the personal information we hold about you.
• removeCorrection: request that we correct inaccurate or incomplete information.
• removeDeletion: request that we delete your personal information (“right to be forgotten”).
• removePortability: request an export of your data in a machine-readable format.
• removeRestriction: request that we restrict processing of your data in certain circumstances.
• removeObjection: object to processing based on our legitimate interests.

The Service is not directed to children under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

If you believe a child has provided us with personal information, please contact us at support@heatsync.app.

The Service may contain links to third-party websites or resources. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, by sending a notice to your account email address.

Your continued use of the Service after any change constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: