Privacy Policy

1. What this covers

This Privacy Policy explains how Thora Cloud LLC ("Thora", "we") handles personal information when you visit thora.cloud, request an invite, contact us, or use Thora One Business and the Thora Business apps.

When a business uses our apps to manage its own customers and workers, that business decides what information goes in and why. For that information we act as the business's service provider (or "processor") under our Data Processing Addendum. If you are a customer of a business that uses Thora, please contact that business first about your information.

2. What we collect

• Account details: name, email, phone, business name, role and sign-in information.
• Business data you enter: customers, addresses, jobs, quotes, invoices, schedules, time records, review requests and files.
• Messages with us: emails, texts and invite requests, including what you tell us about your business.
• Payment details: billing is handled by Stripe. We receive billing status and limited details such as the last four digits of a card; we do not store full card numbers.
• Usage and device data: pages viewed, actions taken, IP address, browser and device type, and error logs, used to run and protect the Services.
• Thora AI inputs and outputs: what you ask Thora AI and what it returns, so it can work from your business record.
• Text message records (when texting launches): phone numbers and message content, as described in the SMS and Communications Terms.

3. How we use it

• To provide the Services, including keeping one shared record across the apps.
• To set up your account and help you move your data over.
• To bill you and prevent fraud.
• To keep the Services secure, find bugs and fix them.
• To answer questions and send service messages (for example billing or security notices).
• To improve the Services, using aggregated or de-identified information where we can.
• To follow the law and enforce our Terms.

We send marketing email only to people who asked to hear from us or are business customers, and every marketing email has an unsubscribe link.

4. Who we share it with

We do not sell personal information and we do not share it for cross-context behavioral advertising.

• Service providers who help us run the Services, bound by contract to protect it. They are listed on our Subprocessors page.
• People in your business account, according to the roles the account owner sets.
• Authorities, when the law requires it. See our Law Enforcement Requests policy.
• A buyer or successor, if Thora is involved in a merger, acquisition or sale of assets, subject to this policy.
• Anyone else, with your permission.

5. Thora AI

AI features may use third-party AI providers, listed on our Subprocessors page. When you use them, we send only the parts of your business record needed to answer the request, and the provider handles it under its business terms. We do not use your data to train our own AI models.

6. Cookies

We use a small number of cookies and similar storage to sign you in and keep the Services secure. We do not use advertising cookies. See the Cookie Policy.

7. How long we keep it

We keep account and business data while your account is active. After cancellation takes effect, you have 30 days to export it. After that export period, we delete it within 90 days of cancellation taking effect, including backups. We keep billing records as long as tax and accounting law requires.

8. Security

We protect information with access controls, encryption in transit and separation between businesses. No system is perfectly secure. Read our Security overview for details.

9. Your choices and rights

You can view, correct and export your account and business data in the Services. Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas or Oregon), you may have rights to know, access, correct, delete or get a copy of your personal information, and to opt out of sale, sharing or targeted advertising, which we do not do.

To make a request, email hello@thora.cloud. We will verify your request and answer within the time the law requires. You can use an authorized agent. We will not treat you differently for using your rights. If we deny your request, you can appeal by replying to our answer.

10. Children

The Services are for businesses and are not directed to children. You must be at least 18 to use the Services. We do not knowingly collect personal information from anyone under 18.

11. Where data is kept

Thora is based in the United States. We host the Services on our own servers in St. Louis, Missouri, and use the United States providers on our Subprocessors page. If you use the Services from elsewhere, your information is transferred to and handled in the United States.

12. Changes

We will post any update here with a new effective date. For material changes we will notify account owners by email or in the Services before they take effect.

Contact us

Questions about this document go to hello@thora.cloud.

Formal legal notices go by email to legal@thora.cloud, as described in the Terms of Service. Thora Cloud LLC is an Ohio limited liability company.