Privacy Policy

Who we are

This policy is provided by ThinkEx Inc. ("ThinkEx," "we," "us," and "our"). ThinkEx Inc. is responsible for the personal information processed through the ThinkEx service.

Information we collect

• Account information, including your name, email address, profile image, authentication provider details, anonymous guest account status, session identifiers, IP address, and user agent.
• Workspace information, including workspace names, descriptions, membership roles, invites, documents, notes, folders, uploaded files, generated previews, extracted text, and collaboration activity.
• AI and tool activity, including prompts, selected workspace context, chat thread metadata, model selections, tool calls, tool results, and usage details needed to run and improve AI features.
• Feedback, support, invite, and account-deletion communications that you send to us or ask us to send.
• Usage, analytics, device, browser, error, and diagnostic information collected by the app and by configured analytics services. Where session replay is enabled, this may include visible page and AI chat content; form inputs and sensitive areas are masked. Prompts, responses, tool inputs, and tool outputs are included in AI diagnostics only after you explicitly accept or enable session replay.

How we use information

• To provide, secure, debug, and improve ThinkEx.
• To authenticate users, maintain sessions, support guest accounts, and transfer guest work when an account is linked.
• To store, render, convert, extract, search, and share workspace content at your direction.
• To run AI chat, document reading, web research, code execution, model routing, usage tracking, and related tool activity.
• To send workspace invites, account-deletion verification emails, feedback notifications, security notices, and service messages.
• To detect abuse, enforce limits, protect accounts, and comply with legal obligations.

Service providers

We use service providers to operate ThinkEx. Depending on the feature and environment, these may include Cloudflare for hosting, storage, databases, Durable Objects, Workers AI, Browser Rendering, email delivery, and sandboxed compute; Google for sign-in; Vercel AI Gateway and AI model providers such as OpenAI, Anthropic, and Google for AI responses; Firecrawl and Cloudflare Workers AI for file, web, and research extraction; PostHog for analytics, feedback, error reporting, session replay in deployed builds, and AI observability; The Context Company for AI observability; and Autumn for AI usage tracking. These providers process data only as needed to provide their services to ThinkEx Inc.

Workspace content and AI

Your workspace content remains yours. When you use AI features, ThinkEx may send your prompt, selected workspace context, extracted text, file-derived content, and tool outputs to the configured AI or extraction providers so they can return a result. Do not use ThinkEx for highly sensitive information unless you are comfortable with this processing.

Cookies and local storage

ThinkEx uses cookies and browser storage for authentication, security, preferences, workspace UI state, analytics, feedback, error reporting, and session replay where configured. See the Cookie Policy for more detail.

Retention and deletion

We keep account, workspace, file, invite, chat, analytics, and diagnostic information for as long as needed to provide ThinkEx, maintain security, comply with legal obligations, resolve disputes, and improve the service. You can request account deletion from settings. Account deletion removes your account resources and purges workspaces you own, including their items and files. Some logs, backups, analytics, security records, or provider records may remain for a limited period where required for operations, security, or legal compliance.

Your choices

• You can update or delete workspace content inside the app.
• You can delete your account from settings after email verification.
• You can control cookies and browser storage through your browser, though blocking required cookies may break sign-in and core app features.
• You can contact us to request access, correction, export, deletion, or other privacy help.

Children

ThinkEx is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can take appropriate action.

Security

We use technical and organizational safeguards such as access controls, security headers, authenticated workspace access, scoped upload validation, and provider-backed infrastructure. No internet service can guarantee perfect security.

Contact

For privacy questions or requests, email hello@thinkex.app.