Privacy Policy

Thermisight Dynamics LLC ("Thermisight," "we," "us") respects your privacy. This policy explains what information we collect, how we use it, and the choices you have. It applies to thermisightdynamics.com, thermisighthunters.com, thermisightindustrial.com, and thermisightdrone.com (collectively, the "Sites"), and our storefront. All four domains are owned and operated by Thermisight Dynamics LLC.

Information We Collect

Account & order data: name, email, password (hashed), shipping address, and order history when you create an account or place an order.

Verification documents: if you apply for military, law enforcement, or first-responder pricing, we collect the verification ID and agency/branch information you submit to confirm eligibility.

Usage data: pages viewed, products interacted with, and approximate device/location data used to improve the catalog and detect abuse.

Product registration data: if you register a product for warranty coverage, we collect the product serial number and link it to your email so we can notify you of safety notices or recalls affecting your specific unit.

B2B procurement data: if you submit a quote request through our B2B procurement portal, we collect your agency name, contact information, and product interest to route the request to the appropriate manufacturer.

How We Use Information

• To process and fulfill orders and route them to the appropriate manufacturer.
• To verify eligibility for protected discounts and pricing tiers.
• To respond to support requests and send order and account notifications.
• To improve product recommendations, site performance, and security.

Sharing

We share order details (product, quantity, ship-to address) with the manufacturer fulfilling your order and with Stripe to process checkout and payment. We never sell your personal information. Verification documents are reviewed only by authorized Thermisight administrators. B2B quote requests are routed to the manufacturer's authorized contact for that brand. Manufacturer partners access only their own brand's order data through the partner portal — brand-scoped row-level security prevents any partner from seeing another brand's customer information.

Automated Processing & AI Tools

We use AI-assisted tools to improve your shopping experience: an AI-powered Optic Assistant for product recommendations, an AI buyer's guide, and automated order routing to manufacturers. These tools process catalog and order data but do not access your encrypted PII. An MCP (Model Context Protocol) server exposes product catalog and order-status data to external AI assistants (such as ChatGPT or Claude) via OAuth-authenticated tool calls — a buyer can query live catalog data or look up order status from the AI client they already use. No customer PII is exposed through the MCP server; only product specifications and order status (by tracking token) are available.

We also monitor public social engagement across Facebook, Instagram, YouTube, LinkedIn, and X to detect viral content and measure cross-channel performance. This monitoring uses publicly available post metrics (views, likes, comments, shares) and does not access private customer accounts or messages.

Cookies & Analytics

We use essential cookies for cart and authentication and analytics to understand site usage. You can disable cookies in your browser, though some features may not work as a result.

Data Retention

We keep account and order records for as long as your account is active and as needed for legal and tax obligations. Verification records are retained to confirm continued eligibility and to prevent misuse of protected pricing.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. Residents of certain states have additional rights under applicable privacy law.

California & State Privacy Rights

Thermisight Dynamics complies with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and with the comprehensive consumer-privacy laws of other states, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Iowa (CDPIA), Indiana (INCDPA), Tennessee (TIPA), Montana (CDPA), Texas (TDPSA), Oregon (OCPA), Delaware (DPDPA), New Hampshire, New Jersey, Florida (FDBR), Maryland, Minnesota, Rhode Island, and Nebraska, as those laws take effect. Because Thermisight Dynamics is an Oregon-based business, we follow the Oregon Consumer Privacy Act (OCPA) as our baseline. Where any provision here conflicts with an applicable state law, we honor the more protective requirement.

• Right to know, delete, and correct. Residents of these states may request disclosure of the personal information we collect, ask us to delete it, or correct inaccurate data, subject to legal exceptions (for example, retaining order records for tax and fulfillment obligations).
• Right to opt out of "sale" or "sharing." We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You may still opt out of analytics and marketing communications at any time using the link in our emails or by contacting us.
• Sensitive information. Verification documents (military, law-enforcement, or first-responder credentials) are treated as sensitive personal information. They are used only to confirm eligibility for protected pricing, encrypted at rest, and accessible only to authorized administrators.
• No retaliation. We will not discriminate against you for exercising your privacy rights.

To submit a verifiable consumer request, email jamesmcgee@thermisightdynamics.com with your name and the email address on your account. We respond within the time required by applicable law (generally 45 days).

International Visitors & GDPR

We sell and ship only within the United States and do not intentionally direct our site to, or collect personal information from, residents of the European Union, the United Kingdom, or other regions outside the U.S. Our services are not offered to EU/UK residents, and we do not maintain a representative in the EU or UK. Accordingly, the General Data Protection Regulation (GDPR) does not apply to our U.S.-only operations. If you are visiting from outside the U.S., you do so voluntarily and acknowledge that your information is processed in the United States.

Children's Privacy

Our site and products are not directed to anyone under 16, and we do not knowingly collect personal information from children. You must be at least 18 years old (or the age of majority in your state) to create an account or place an order, consistent with our Terms of Service and U.S. export requirements. If you believe a minor has submitted information to us, email jamesmcgee@thermisightdynamics.com and we will delete it.

Data Security & Breach Notification

We protect personal information with the safeguards described in our Security & Data Protection policy, including TLS encryption in transit and AES-256-GCM field-level encryption for sensitive identifiers at rest. In the event of a breach of security affecting personal information, we will investigate and notify affected customers and the Oregon Attorney General as required by Oregon Revised Statutes (ORS 646A.604) and other applicable state breach-notification laws without unreasonable delay.

Limitations & Exemptions

Nothing in this policy limits any right you may have under applicable federal or state law. Certain information — for example, data collected solely to complete a transaction, or information that is de-identified and not re-identified — may be exempt from specific state-law definitions of personal information. Our representations apply to the extent required by applicable law.