Skip to content
Cryovo
Cryovo

Legal

Cryovo Privacy Policy

Last updated October 8, 2026

Plain-language summary — not the legal text

  • Cryovo is the processor for the business data you upload — temperature readings, equipment records and compliance reports — and the controller for the account, billing and usage data needed to run the service.
  • We collect account data, the business data you provide, usage and technical data, and billing data. Full card details go to Stripe; we do not store them.
  • We set only strictly-necessary cookies. Optional analytics is first-party and cookieless, needs your consent and can be declined without losing the core service.
  • We share data with the processors that run the service — Stripe (payments), Supabase (database and authentication), Netlify (hosting and CDN) — and with The Cold Standard newsletter publication when you submit the footer form. We do not sell personal data.
  • You may request access, correction, deletion and portability, and — where processing is based on consent — withdrawal of consent. Export and deletion are available from the in-app controls at /account, or email hello@thermoneural.com.

A reading aid only — the full Privacy Policy below is the version that applies. The summary does not change the policy.

Effective: 2026-10-07

Cryovo ("we," "us," "our," or "Cryovo") operates a cold-chain and F-gas compliance platform. Cryovo is operated by R7AD (Yahia Riad Hanniz), sole proprietor, Markham, Ontario, Canada. This policy explains what we collect, why, and your rights.

1. Who we are and our role

Cryovo is a data processor for the business data you and your organization (the controller) upload — temperature readings, equipment records, and compliance reports — and a data controller for the account, billing, and usage data needed to run the service. As a B2B tool, most of the data you process relates to your facility and products, not private individuals.

2. Information we collect

  • Account data: name, email, company, role (for e-signatures).
  • Business data you provide: equipment, temperature logs (CSV), compliance records.
  • Usage & technical: IP address, browser/device, pages visited, session data — to operate and secure the service.
  • Billing data: processed by our payment provider (Stripe). We do not store full card numbers.

3. How we use it

  • Provide and secure the platform (excursion detection, audit records, reports).
  • Send transactional and, with your consent, promotional communications.
  • Comply with legal obligations and respond to lawful requests.
  • Improve the product using aggregate, non-identifying data.

Where applicable, we rely on: contract performance (providing the service you asked for), legitimate interests (securing and improving the service), consent (marketing, optional analytics), and legal obligation.

5. Cookies & consent

We set only strictly-necessary cookies (e.g. session/auth) and no non-essential cookies. Optional analytics is first-party and cookieless; where you switch it on, we seek your consent before it runs, and you can decline and still use the core service.

The optional analytics sets no cookies and stores no identifiers — only the page path, the referring host, and a daily-rotating hash that cannot be linked across days — and is used in aggregate only.

6. Sharing

We share data only with the processors that run the service — Stripe (payments), Supabase (database & authentication) and Netlify (hosting & CDN) — and where required by law. We do not sell personal data. The Cold Standard newsletter form in the footer sends the email address you enter to that ThermoNeural publication, which processes it for the newsletter. See our Data Processing Agreement for the current sub-processor list.

7. Retention & security

We keep account records for as long as your account is active or as needed for legal/contractual purposes, then delete or anonymize. We use encryption in transit and industry-standard access controls; we do not claim a specific certification (e.g. SOC 2) unless separately obtained.

8. Your rights (GDPR / CCPA / other)

You may request access, correction, deletion (erasure), portability, and — where processing is based on consent — withdrawal of consent. Export and deletion are available from the in-app controls at your account; you can also contact us, and we respond within the legally required timeframe.

9. Contact

Privacy questions, DSARs, or a DPA request: contact us at hello@thermoneural.com. A Data Processing Agreement is available here: View the DPA.