Privacy Policy

Hydrolus, Inc. (“Hydrolus”, “we”, “us”) develops water reclamation infrastructure for data centers and other industrial water users. This policy explains how we handle personal information collected through www.hydrolus.com and through email and other correspondence with us.

Hydrolus decides why and how that information is used. In European data protection terms, we are its controller. Questions about this policy, and requests about your information, go to hello@hydrolus.com.

Contact form. The form asks for your name, your email address, your company, and a message. Your role or title, and whether your inquiry is about a data center or enterprise project or about investment or partnership, are optional. Nothing on the site asks you to create an account.

Correspondence. Whatever you include in emails, calls, and documents you send us.

Please do not send sensitive personal information, or confidential project data, through the contact form. If a discussion needs it, we will agree a suitable way to exchange it.

Hosting logs.Our host, Vercel, records standard request logs when a page loads: the address requested, the time, your IP address, and your browser's user-agent string. Every website needs these to stay online and to defend itself from abuse.

Visit statistics. We use Vercel Web Analytics to count visits and see which pages are useful. For each page view it records the page, the site that linked to it, your approximate location (country, region, and city, derived from your IP address), and your device type, operating system, and browser. It uses no cookies and does not store your IP address. It tells visits apart with a hash of the request that it discards after 24 hours, so it cannot follow you from day to day or across other websites. We see only totals.

Google Analytics, only if you allow it. If you accept analytics cookies in the cookie banner, Google Analytics also records the pages you view, the site that linked to them, your approximate location, and your device and browser, and sets the cookies listed under Cookie policy to tell visits apart. It runs with Google signals and ad personalization turned off, and we do not use it for advertising. If you decline, it never loads.

Bot protection on the contact page. The contact form uses Cloudflare Turnstile to check that a message comes from a person, not a script. To do that, Turnstile processes technical signals from your browser, such as your IP address, TLS fingerprint, and user agent. It does not read what you type into the form. It runs on the contact page only. Cloudflare describes this processing in its Turnstile Privacy Addendum.

What we do not use. No advertising or social-media trackers, and no session recording or heat maps. The typefaces are served from this site, so displaying a page does not contact a font service. The cooling tower blowdown calculator runs in your browser: the values you enter are not sent to us.

This site sets no advertising cookies, and it stores nothing in your browser's local or session storage. The only optional cookies belong to Google Analytics, and they are set only if you accept them in the cookie banner. Vercel Web Analytics is cookie-free, and the Turnstile check on the contact page sets no cookie: we run it without Cloudflare's clearance cookie.

Google Analytics (optional). _gatells one visitor's visits apart from another's, and_ga_5Z66F2MJQX keeps track of the current visit. Each lasts up to 2 years.

Your choice. Once you answer the banner,cookie_consent remembers the answer for 180 days so we do not ask again. The Cookie settings button in the footer lets you change it at any time; withdrawing consent deletes the Google Analytics cookies.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information. There is currently nothing to opt out of, because we do neither.

We use personal information only for the purposes below. The legal basis we rely on for each is shown after the dash.

• To answer your inquiry and discuss a possible project, partnership, or investment — at your request, to take steps before entering into a contract, and in our legitimate interest in responding to business inquiries.
• To keep the website and contact form secure and block automated abuse — in our legitimate interest in protecting our business and the people who contact us.
• To understand, from anonymous totals, how the site is used and improve it — in our legitimate interest in running a useful website; for Google Analytics, on the basis of your consent, which you can withdraw at any time in Cookie settings.
• To comply with the law, and to establish, exercise, or defend legal claims — where the law requires it, or in our legitimate interest.

We do not sell personal information, we do not share it for targeted advertising, and we do not use it to build advertising profiles. Where we rely on legitimate interests, you can object, as described under Your rights.

Service providers, each limited to its own role:

• Vercel hosts the website and provides its visit statistics.
• Google provides Google Analytics, only if you accept analytics cookies, to produce our visit reports.
• Mailgun delivers contact-form messages to our inbox.
• Zoho hosts our company email, where inquiries are kept.
• Cloudflare runs our domain's DNS and the Turnstile check on the contact form.

Advisers and authorities. Our professional advisers (lawyers, accountants, auditors), who are bound by confidentiality; and regulators, courts, law enforcement, or other authorities when the law requires it or to protect rights and safety.

Business transfers. If Hydrolus is involved in a merger, acquisition, financing, or sale of assets, information may pass to the other party or a successor, subject to this policy.

Hydrolus is based in the United States, and our service providers process information there. If you contact us from another country, including from the European Economic Area or the United Kingdom, your information is transferred to and processed in the United States, where data protection law may differ from yours. Where the law requires a safeguard for such transfers, we rely on the mechanisms in our providers' data processing terms, such as the European Commission's Standard Contractual Clauses.

Inquiries and correspondence: as long as we need them to reply and, if a business relationship follows, for that relationship and the period after it that records and possible legal claims require.

Visit statistics: kept only as anonymous totals. The hash that tells visits apart is discarded after 24 hours.

Google Analytics (only if you allowed it): event data is kept for 14 months, then deleted by Google.

Hosting, delivery, and security logs: our providers keep them for short periods on their standard schedules, then delete them automatically. The website itself keeps no database of form submissions and no copy of your message.

When we no longer need information, we delete it or make it anonymous.

The site is served only over HTTPS, so what you type into the contact form is encrypted in transit. The website holds no database of submissions, no accounts, and no passwords, and access to our email is limited to the people who need it. No system is perfectly secure, so please send through the form only what an inquiry needs.

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy, in a portable format where the law provides for it;
• have inaccurate information corrected;
• have your information deleted;
• restrict or object to our use of it, including use based on our legitimate interests;
• withdraw consent where we rely on it, without affecting what happened before;
• not be treated differently for exercising any of these rights.

To make a request, email hello@hydrolus.com. We may need to confirm your identity first. Someone you authorize may make a request for you if they show that authority. We respond within the time the law that applies to you sets, and never later than 30 days.

If we decline a request, we will tell you why. You can appeal by replying to our decision, and we will answer the appeal within the time the law requires. You may also complain to the data protection authority, or in the United States the state attorney general, where you live.

Residents of U.S. states with consumer privacy laws also have the right to opt out of the sale of their personal data and its use for targeted advertising. We do neither.

This site is for businesses, investors, and public agencies interested in water infrastructure. It is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.

When our practices change, this page changes with them and the effective date at the top moves. That date is how you can tell whether anything has changed since you last read it.

Hydrolus, Inc. Email hello@hydrolus.com. For our website terms, see the Terms of Service.