Privacy Policy

We collect information you choose to provide, including your name, work email, company, role, requested fleet size, use case, and the contents of messages sent to our support, privacy, or security channels.

Our website and service providers also process technical information such as IP address, browser and device type, timestamps, requested pages, referral information, and security or anti-abuse signals. We use an IP-derived identifier to enforce submission rate limits.

• Respond to allocation, support, privacy, and security requests.
• Provide, secure, troubleshoot, and improve the website and services.
• Prevent abuse, investigate security events, and enforce agreements.
• Meet legal, accounting, audit, and compliance obligations.
• Measure aggregate website usage and service reliability.

Mount Thor does not sell personal information. We do not use public-form submissions for cross-context behavioral advertising.

We use service providers to operate the public site and its request workflow, including Vercel for hosting, Google Analytics for aggregate site measurement, Cloudflare Turnstile for abuse prevention, Upstash for rate limiting, Resend for email delivery, and Google Workspace for business communications.

We may also disclose information when required by law, to protect rights or safety, in connection with a corporate transaction, or with your direction. Providers receive only the access needed to perform their contracted function and are subject to their own contractual and legal obligations.

We retain information only as long as needed for the purpose collected, contractual operations, security, dispute resolution, and legal or audit requirements. Verified customer deletion requests are handled under Mount Thor’s Data Management Policy; customer account data is scheduled for deletion within 60 days after contract termination, subject to legal holds, security needs, and rotation-safe backup lifecycles.

We use administrative, technical, and organizational safeguards designed to protect information. No storage or transmission method is guaranteed to be completely secure.

You may ask to access, correct, or delete personal information, or object to or restrict certain processing where applicable law provides those rights. We verify requests before acting and may retain limited information when required by law, security, or an enforceable agreement.

The public site is intended for business users and is not directed to children under 18. Information may be processed in the United States and other locations where our providers operate, subject to applicable safeguards.

We may update this policy as our practices or legal obligations change. The effective date above identifies the current version.