Legal · ThermaSlab

Privacy Policy

What personal data we collect on our public-facing lead forms, where it’s stored, how it’s used, and the third parties that see it.

Last updated: 2026-08-03

Who we are

ThermaSlab Inc. operates this site. The company operator can be reached at support@thermaslab.info or (216) 755-9455. The site is hosted on Polsia’s platform; our database is hosted with Neon Postgres via Polsia.

What we collect

The site collects personal information only through three public-facing lead-capture forms. Each submission is stored in its own database table and is used solely to notify the company operator so a human can follow up. Every field below is captured verbatim from the form and saved as written.

Investor inquiry · POST /api/investor-inquiry · submitted from /investor-summary or /investor-video
name *Your name. Required to send the inquiry. Stored as plaintext text.
firmFirm, family office, or fund name. Optional. Stored as text.
check_size_bandOne of: Open, Under $250K, $250K–$1M, $1M–$3M, $3M+. Optional. Stored as text.
preferred_contact_channelOne of: Email, Phone, Either. Optional. Stored as text.
noteFree-text message. Optional. Stored as text.
sourceHidden field set by the form. Records which funnel page submitted the inquiry (investor-summary or investor-video). Stored as text.

No email address is captured on this form. The investor inquiry form intentionally does not collect an email so that contact is initiated by the operator on the channel you selected.

Distribution partnership interest · POST /api/distribution-interest · submitted from /distribution
company_nameCompany or account name. Optional. Stored as text.
contact_name *Your name. Required to send the inquiry. Stored as text.
roleTitle or role (category manager, regional buyer, …). Optional. Stored as text.
regionRegion or territory. Optional. Stored as text.
distribution_volumeCurrent annual distribution volume. Integer (units or square feet). Optional. Stored as a number.
notesFree-text message. Optional. Stored as text.

No email address is captured on this form. Follow-up is initiated by the partnership team using the channel listed on the one-pager.

Pilot program application · POST /api/pilot-interest · submitted from /pilot-program
company_nameCompany or account name. Optional. Stored as text.
contact_name *Your name. Required to send the application. Stored as text.
email *Email address. Required so a confirmation message can be sent. Stored as text.
phonePhone number. Optional. Stored as text.
project_size_sqftTarget project size in square feet. Integer. Optional. Stored as a number.
target_install_dateTarget install date. Date. Optional. Stored as a date.
regionRegion or territory. Optional. Stored as text.
notesFree-text message. Optional. Stored as text.

Email is captured here because the pilot application sends a confirmation message to the applicant. Investor and distribution forms intentionally do not capture email.

How we use it

Every submission is used solely to send a single owner-notification email via Polsia’s authenticated email proxy (POST https://polsia.com/api/proxy/email/send). The notification contains the captured fields and the database-assigned timestamp. We do not send marketing mailers to form submitters, do not sell or share submissions with any third party, and do not run retargeting or advertising against the captured contact information.

Investor inquiries and distribution partnership interests notify the company operator only — there is no automated reply to the submitter because those forms do not collect an email address. Pilot program applications also send a one-time confirmation message to the submitter’s email because that field is captured.

Where it’s stored

Each submission is written to its own row in its endpoint’s table on a Postgres database hosted with Neon Postgres via Polsia:

investor_inquiriesInvestor inquiry submissions from /api/investor-inquiry.
distribution_interestsDistribution partnership submissions from /api/distribution-interest.
pilot_interestsPilot program applications from /api/pilot-interest.

Submissions are retained for the lifetime of the active lead pipeline so the operator can follow up, look up prior conversations, and report on inbound pipeline totals. There is no automated deletion schedule.

Third parties

A small number of third-party services process form submissions or report on site visits. Each one is used for a single, well-defined purpose:

hCaptchaUsed on the investor and distribution form POSTs when HCAPTCHA_SECRET is configured. The verification token is submitted once to https://api.hcaptcha.com/siteverify and is not stored on our side.
Polsia AnalyticsA single anonymous visitor-id is stored in the browser’s localStorage under the key polsia_vid. A pixel beacon to https://polsia.com/api/beacon/pixel reports visit counts only — no personal information is collected by the pixel.
Polsia email proxyUsed for outbound notification delivery. Receives the submitter’s email address only for the pilot-program confirmation message; investor and distribution submissions trigger notifications to the operator address only.

Cookies

The site sets no marketing or advertising cookies. The Polsia Analytics pixel writes one anonymous visit identifier to the browser’s localStorage (not a cookie). The lead-capture forms themselves set no cookies and read none.

Your rights

You can request access to, correction of, or deletion of any submission you have made by emailing support@thermaslab.info. We will respond within a reasonable timeframe — typically inside 30 days.