Privacy Policy

Last updated: August 24, 2026

This policy explains what Jumboshack collects, why, and your choices. We keep it short and plain. If anything is unclear, email hello@jumboshack.com.

1. Information we collect

Account information — your email address, password (stored only as a secure hash), and, if you provide them, optional profile details such as name, phone, or address, plus two-factor authentication settings.

Data you send us — the system readings you or your device transmit to the Service (for example, temperatures, pressures, power, flow, and status from your HVAC / geothermal equipment), along with the device and location labels you create.

Usage & technical data — basic logs needed to run and secure the Service, such as IP address, timestamps, and request/error information. We use essential cookies for authentication and security (login session and CSRF protection); we do not use advertising trackers.

2. How we use your information

To provide the Service — build your dashboards, history, cost reports, and diagrams from your data.
To secure the Service — authenticate you, enforce rate limits, and detect abuse.
To communicate with you — account, verification, password reset, and service messages.
To improve the Service — using aggregated and de-identified statistics that do not identify you.

3. How we share information

We do not sell your personal data. We share it only:

With service providers that help us run the Service (for example, cloud hosting and email delivery), under agreements that limit their use of the data to providing those services.
At your direction — if you create a read-only share, the person you choose can view your data until you revoke it.
For legal reasons — if required by law, or to protect the rights, safety, and security of Jumboshack, our users, or the public.

4. Data retention

We keep your data while your account is active so the Service can show your history. During the beta, retention windows and resolution may change as we tune the product. You can request deletion of your account and data at any time (see “Your choices” below).

5. Security

We protect data in transit with HTTPS/TLS, authenticate devices with per-device tokens (stored only as hashes), offer optional two-factor authentication, and apply standard security headers and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your choices & rights

You can access and update your account information, export your data, revoke shares, disable two-factor auth, and delete your account. To exercise any of these — including access, correction, or deletion requests — email hello@jumboshack.com and we’ll help. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor applicable requests.

7. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children.

8. International users

The Service is operated from the United States and your data will be processed there. By using the Service, you consent to that processing.

9. Changes to this policy

We may update this policy from time to time. We’ll change the “Last updated” date above and, for material changes, provide additional notice where appropriate.

10. Contact

Privacy questions or requests: hello@jumboshack.com.