Privacy Policy

This Privacy Policy applies to thbproject.ca, FreeUtilityHub, and related services (collectively, the "Site"), operated by THB Project. It describes the collection, use, disclosure, retention, and protection of personal information associated with the Site. Third-party websites and services are governed by their own privacy policies.

1. Information handled by the Site

Tool data

Most tools process files and entries in the browser. This may include passwords, documents, images, invoice details, and text. Except where a tool identifies the use of a network or browser service, tool data is not transmitted to or stored by THB Project.

Each tool identifies its processing method:

• Local only— the core function runs on the user's device.
• Downloads model— software model files may be downloaded to the user's device.
• Fetches public data — public reference data is requested from an external provider.
• Uses browser service — processing relies on a service provided by the browser, device, or operating system.

Information submitted directly

Information submitted directly may include:

• names, email addresses, and the content of support or privacy requests;
• information required to complete, restore, or support a purchase; and
• product, licence, and entitlement records associated with a purchase.

Payments and licences

Payments are processed through Stripe. THB Project may receive transaction information such as a customer name, email address, product, payment or subscription status, amount, date, and Stripe customer or transaction identifiers. Full payment card numbers are not received or stored by THB Project.

Where purchase restoration is available, an email address is used to locate the applicable entitlement and send a time-limited restoration link.

Technical data and optional analytics

Vercel hosts the Site and may process standard request information such as IP address, browser type, requested page, and request time for delivery, security, and reliability.

When analytics consent is granted, first-party analytics may collect randomized visitor and session identifiers, pages viewed, clicks, downloads, active time, referrer and campaign information, IP address, approximate city, region and country, language, time zone, screen size, and device type. IP addresses are masked by default. Analytics do not read file contents, passwords, documents, or values entered into a tool.

The Site does not currently use Google Analytics, Vercel Web Analytics, advertising trackers, or tracking pixels. THB Project does not sell or rent personal information.

2. Purposes of processing

Personal information is processed only as reasonably necessary to:

• provide, maintain, secure, and troubleshoot the Site;
• process purchases and manage licences and entitlements;
• restore purchases and respond to support or privacy requests;
• measure and improve the Site where analytics consent has been granted;
• prevent fraud, misuse, and security incidents; and
• meet legal, tax, accounting, and regulatory obligations.

3. Service providers and disclosures

Service providers used for specific operational functions may include:

• Vercel for hosting and infrastructure;
• Stripe for payment processing;
• Upstash for analytics, licence, and entitlement records;
• Resend for transactional email; and
• external data, model-delivery, or browser-service providers used by tools that identify such processing.

For example, the currency converter requests exchange-rate data from the Frankfurter API, and speech features may be processed by a browser or operating-system provider.

Information may also be disclosed where required by law, in response to a lawful request, or where necessary to protect the rights, security, and integrity of the Site, its users, or others.

4. Browser storage and cookies

The Site may store the following information on a user's device:

• theme, favourites, recent tools, and other preferences;
• tool-specific data, including Pomodoro history;
• Invoice Pro business profiles, clients, invoices, and tax settings;
• licence tokens and product-unlock status; and
• analytics consent and, where consent is granted, randomized analytics identifiers.

Browser controls may be used to remove cookies and local storage. Removal may delete saved tool data, preferences, and product access from that device.

5. Retention

Information stored in the browser remains until deleted through browser or Site controls. Raw analytics events are retained for the configured retention period, which is 90 days by default and never more than 365 days. Support, transaction, licence, and entitlement records are retained only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, fraud-prevention, and dispute-resolution requirements. Information is deleted or anonymized when no longer required, subject to applicable law.

6. Security

THB Project applies reasonable administrative and technical safeguards appropriate to the nature of the information under its control. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

7. International processing

Service providers may process information in Canada, the United States, or other jurisdictions. Information processed outside an individual's jurisdiction may be subject to the laws and lawful-access requirements of the country where processing occurs.

8. Choices and privacy rights

Subject to applicable law, individuals may:

• decline optional analytics through the consent notice;
• withdraw analytics consent by clearing the Site's cookies and local storage;
• request access to, or correction of, personal information under THB Project's control;
• request deletion of personal information, subject to legal and operational retention requirements; and
• submit a question or complaint regarding privacy practices.

Identity verification may be required before a request is completed. Additional rights may apply based on the individual's jurisdiction.

9. Children

The Site is not directed to children under 13 or the minimum age required by applicable law. THB Project does not knowingly collect personal information from children.

10. Changes to this policy

This policy may be updated to reflect changes in practices or legal obligations. A revised policy will be posted on this page with a new "Last updated" date.

11. Contact

Privacy questions, access requests, correction requests, deletion requests, and complaints may be submitted to:

Privacy Officer
THB Project
innovations@ocorp.ca
Contact page