Get started

Privacy Policy

Effective Date: May 1, 2026

This Privacy Policy sets out how ThinkingMach, Inc.("ThinkingMach, Inc.," "we," "us," or "our") collects, uses, protects, and handles your personal data and usage data when you access or use our services.

1. Scope

This Privacy Policy applies to all personal data and usage data collected by ThinkingMach, Inc. through the Services. It describes what data we collect, how we use it, how we protect it, and your rights with respect to that data.

This policy does not apply to third-party services, websites, or integrations that may be linked to or used in conjunction with the Services. We encourage you to review the privacy policies of any third-party services you use.

2. Data We Collect

We may collect the following categories of data:

  • Account Information: Email address, name, organization, and authentication credentials when you create an account.
  • Usage Data: Information about how you interact with the Services, including pages visited, features used, timestamps, and referral sources.
  • Telemetry Data: Anonymized system health metrics, performance data, error rates, and aggregate usage statistics, collected automatically.
  • Detailed Telemetry (opt-in only): Where you explicitly enable detailed telemetry, we may collect full stack traces, agent run logs, configuration data, operational metadata, and other diagnostic information.
  • Device and Technical Data: Browser type, operating system, IP address, device identifiers, and similar technical information.
  • Communications: Content of messages you send to us through support channels or feedback mechanisms.

3. How We Use Your Data

ThinkingMach, Inc. uses collected data for the following purposes:

  • Operating, maintaining, and improving the Services;
  • Analyzing usage patterns and system performance;
  • Developing new features, products, and services;
  • Training, improving, and evaluating machine learning models and algorithms;
  • Generating aggregated, anonymized, or de-identified insights and analytics;
  • Communicating with you about the Services, updates, and security notices;
  • Detecting, preventing, and addressing technical issues, fraud, or security threats;
  • Complying with legal obligations and enforcing our terms.

Anonymized and aggregated data derived from your use of the Services may be used by ThinkingMach, Inc. for any purpose, including commercial purposes, without restriction.

4. Data Sharing and Disclosure

ThinkingMach, Inc. does not sell your personal data. We may share data in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist in operating the Services, subject to confidentiality obligations.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Protection of Rights: To protect the rights, property, or safety of ThinkingMach, Inc., our users, or the public.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your data may be transferred to the acquiring entity.
  • With Your Consent: In any other circumstance where you have provided explicit consent.

5. Data Retention

ThinkingMach, Inc. retains data for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

Anonymized and aggregated data, which cannot be used to identify individual users, may be retained indefinitely for research, analytics, and product improvement purposes.

When data is no longer needed, it will be securely deleted or anonymized in accordance with our internal data management practices.

6. Data Security

We implement commercially reasonable technical, administrative, and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the security of your account credentials and for any actions taken through your account.

7. Your Rights

Depending on your jurisdiction, you may have certain rights with respect to your personal data, including:

  • The right to access personal data we hold about you;
  • The right to request correction of inaccurate data;
  • The right to request deletion of your personal data;
  • The right to object to or restrict certain processing activities;
  • The right to data portability;
  • The right to withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at the address provided below. We will respond to your request in accordance with applicable law.

Please note that certain rights may be limited where we have a legitimate basis to continue processing your data (for example, legal compliance or the exercise of legal claims).

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States. By using the Services, you consent to the transfer of your data to jurisdictions that may have different data protection laws than your home jurisdiction.

9. Children's Privacy

The Services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted to this page with a revised effective date. We encourage you to review this policy periodically. Your continued use of the Services after changes are posted constitutes acceptance of the revised policy.

Contact

If you have questions about this Privacy Policy, please contact us:

ThinkingMach, Inc.
Email: legal@thinkingmach.com
GitHub: github.com/thinkingmach/paperclip