Privacy & data management

Controller and contact

Open Thermal AI is currently operated by Jing Yanrong (individual operator). Legal notices: B5-905, Tahoe Fuzhou Yard, Cangshan District, Fuzhou, Fujian, China. Until a business entity is registered, this individual is the controller for this website.

Where processing takes place

The production website and API run on Alibaba Cloud in mainland China. When you send a Copilot message, the text goes to that server-side proxy, which entrusts DeepSeek to process it. Project Center data stays in your browser unless you choose to send it. If you open an optional GitHub Pages mirror, that host is separate; this notice describes the production path on openthermalai.com.

Why we process personal information

We process information to carry out an action you request, such as sending a report, requesting an expert review, or sending a Copilot message. Optional analytics, Baidu indexing, and the contact QR code run only after you choose each one. Security logs, rate limits, and human-verification challenges keep the service available. Consent is not the only basis.

Cookie & optional-service settings

Necessary browser storage supports your settings and local Project Center. Optional analytics, Baidu indexing, and the contact QR code stay off until you choose each one. Your choice is stored in this browser and can be changed at any time. The optional owner/test setting saves one fixed classification bit locally and in a host-only cookie for up to one year, refreshed on visits. It separates marked requests and consented internal activity; it does not identify a device or exclude an IP address.

What is stored locally

Project Center projects, analysis versions, reports, and Workspace context are stored in this browser (localStorage). Clearing site data can permanently delete them. This is not cloud storage.

What may be sent to the LLM proxy

When you choose to send a message to live Copilot, you are interacting with AI. Brief text and related project parameters may be sent to our server-side proxy, which currently calls DeepSeek. Do not enter personal data, confidential customer information, trade secrets, passwords, controlled drawings, or regulated data. Deterministic engineering numbers come from registered calculators — not from the model inventing results. API keys never leave the server.

What is stored on our server

The proxy stores logically separated analytics, lead, rate-limit, cost, challenge-nonce and security tables in a server-only SQLite database. API keys and full project records are not stored there. Raw anonymous analytics are retained for up to 90 days; security logs up to 30 days; rate buckets and challenge nonces are short-lived. The Project Center remains browser-local.

Third-party services

DeepSeek: only when you choose to send a message, the China-based server proxy entrusts DeepSeek with Copilot chat and parameter extraction. Hosting: the production site and API run on Alibaba Cloud in China; GitHub Pages is an optional mirror. Notion is the operator reference knowledge base only; user projects, Copilot messages, and lead records are not written to Notion. The production build does not use third-party web analytics. First-party funnel analytics use a short-lived random session id and exclude names, emails, project titles, exact engineering inputs, and AI text; they stay off until you choose them. Baidu URL push, only after you agree, sends the current page address for search indexing (not visit analytics); the recipient is in China. api.qrserver.com, only after you agree, receives a browser request for a QR image. That request contains this site public vCard link, not the visitor address book. Cloudflare Turnstile loads only when a human-verification challenge is required, and technical data may be sent to Cloudflare. Contact forms open your email client. No third-party form service is required. Hosting logs, security logs, and API operational logs may be retained by their providers under their own terms. Last reviewed: 2026-10-06.

Conversations

Chat history shown in Workspace is primarily local to the browser session / project. Do not paste secrets, passwords, or regulated personal data into briefs.

Files

Project files can be attached locally in this browser (IndexedDB). Sending file text/metadata to AI requires explicit user confirmation per file. There is no permanent cloud file vault yet — clearing site data removes local files. Secure multi-user cloud storage remains Planned.

Model training

We do not claim that provider models never use API traffic for training. Check each enabled provider’s current API terms (DeepSeek today). Prefer redacting customer names and proprietary process details when possible.

How to delete data

• In Project Center → project Settings: export, then delete the project.
• Or clear this site’s data in your browser settings.
• Export important projects regularly — local data can be lost.

Engineering disclaimer

Screening reports and calculators are illustrative aids. They are not PE-stamped design, procurement documents, or legal advice. Have qualified engineers review before investment.

Children

This site is not directed to anyone under 16. Do not submit personal information if you are under 16.

Rights where you are

Use the contact addresses on this page for these requests. Publishing this notice does not create a local establishment or appoint a local representative.

China (Personal Information Protection Law). You may ask to know about, access, copy, correct, or delete personal information we hold, and to withdraw consent. Optional features that send personal information outside mainland China name the recipient in this notice and stay off until you agree.

European Union and United Kingdom (GDPR and UK GDPR). You may request access, correction, erasure, restriction, portability, or object to processing, and you may complain to a supervisory authority where you live. We have not appointed an EU or UK representative.

United States. We do not sell personal information, and we do not use it for cross-context advertising. You may ask us to access or delete lead records even where a state privacy law threshold is not met.

Japan (APPI). China is not on the Japanese adequacy list. Overseas recipients are described in this notice. Optional services that leave your browser for another operator load only after you agree.

United Arab Emirates (Federal Decree-Law No. 45 of 2021) and Saudi Arabia (Personal Data Protection Law). This site is not established there and has not appointed a local representative. If you are in either country, you may still ask to access, correct, or delete personal information through the same email. The same channel is available if you are in Qatar, Bahrain, Oman, Kuwait, Egypt, or Israel. This paragraph does not mean a local registration has been completed.

Leads, analytics & retention

If you submit a lead (email report or expert review), we store contact and consent fields separately from anonymous product analytics. Analytics events use a short-lived random session id and never include names, emails, project titles, exact engineering numbers, or AI prompt/response text. Current maximums are: raw analytics 90 days before aggregation, security logs 30 days, inactive non-marketing leads 180 days before deletion or anonymization, privacy-request records 180 days, and aggregate AI cost records 365 days. Rate-limit buckets expire within 2 days and used challenge tokens within 5 minutes. Marketing consent is optional and off by default.

Your rights

You may request export or deletion of lead records, correction, an objection to processing, or withdrawal of marketing consent, using the form below or by email. Requests are queued pending identity verification so another person cannot change your record using only your email address. Local project data is deleted in Project Center or by clearing site data in your browser. Submitting an email never uploads your full project automatically. A complaint to a regulator is filed by you with that authority; we do not file it for you.