Privacy Policy

01What this policy covers

Thinair processes information to provide accounts, computing resources, collaboration, AI features, support, and payments. The information involved depends on the features and connections that you use.

Organizations can control content and personal information within their accounts. If your Organization controls your account, its policies and instructions also apply. Contact its administrator about Organization-controlled content.

Third-party websites, applications, and AI providers have separate privacy policies. This policy does not replace those policies.

02Information we process

Account information includes your name, email address, authentication information, profile information, Organization membership, and access permissions.

Service content can include messages, prompts, files, code, agent output, task history, and information from connected services. Collaboration features also process the content that participants share.

If you use meeting or transcription features, the relevant providers process audio, video, messages, or transcripts as required by those features.

Operational information includes resource identifiers, usage amounts, timestamps, connection information, device and browser information, diagnostic records, and security events.

Payment information includes your billing identity, subscription state, payment status, invoices, credit purchases, and usage charges. Stripe collects and processes payment-card details through its payment interfaces.

Support information includes the details that you send in an inquiry, issue report, or other communication.

03Native, Cloud, and connected providers

Native can run software and store work on your computer. Cloud stores and processes information on hosted infrastructure. Use of Native does not mean that all activity remains on your computer.

Authentication, collaboration, hosted Machines, AI requests, and connected services can transmit information outside your computer. The destination depends on the feature, provider, and access that you select.

When you request AI work, the AI provider receives the context needed for that request. This context can include prompts, instructions, tool definitions, files, and earlier messages.

Provider retention and model-training practices depend on the provider and the account terms that apply. You must review those practices before you submit sensitive information through a connected provider.

04How we use information

We use information to provide the service, authenticate users, enforce permissions, run requested work, and synchronize shared content.

We also use information to measure billable usage, collect payments, provide support, diagnose errors, prevent abuse, and meet legal obligations.

We send service messages about access, security, purchases, and material changes. These messages are separate from optional promotional communications.

Where data-protection law requires a legal basis, we rely on the service contract, legal obligations, consent, or legitimate interests as appropriate. Legitimate interests include service security, support, and reliability, subject to the rights that applicable law gives you.

05Who receives information

Collaborators and Organization administrators receive information according to their access and the features that you use. Connected services receive information that your actions or authorized agents send to them.

We use service providers for hosting, payments, email, analytics, AI processing, and communication features. These providers receive information relevant to their functions.

Our infrastructure and delivery providers include AWS and Vercel. Stripe processes payments. Resend delivers service email. PostHog receives optional website analytics after consent.

Meeting features use LiveKit, and transcription features can use Deepgram. AI features use the provider selected for the relevant request, directly or through an AI gateway.

We can disclose information to comply with valid legal requirements, protect people and systems, enforce agreements, or resolve payment disputes.

A merger, acquisition, or transfer of business assets can involve personal information. Applicable confidentiality and data-protection obligations continue to apply to that transfer.

06Cookies, browser storage, and website analytics

Authentication and essential service functions can use cookies or browser storage. The website stores your analytics choice in local storage.

Optional website analytics require your consent. You can allow, decline, or withdraw consent through Analytics preferences in the website footer.

After consent, the website uses a random identifier for the current browser tab. It records catalog page identifiers and selected actions, such as download clicks or a demo start.

This website analytics integration does not send email addresses, prompt content, arbitrary query strings, or complete browsing histories in its event payloads. It does not use session recordings or analytics cookies.

Providers still receive ordinary network information, such as an IP address, as part of a request. Withdrawal stops future optional analytics delivery and removes the tab identifier.

07Retention and security

We retain information for the purposes described in this policy. Retention depends on the information, account state, service function, legal requirements, and security needs.

Removal from an active service does not necessarily remove every backup or billing record immediately. Backups follow their retention cycles. Legal, payment, and security records can require longer retention.

We use access controls and other technical and organizational measures to protect information. No system can guarantee complete security.

You must protect your credentials and choose appropriate access for collaborators, agents, and connected services. Contact Thinair about suspected unauthorized access.

08Your choices and rights

You can manage available account information, permissions, connections, and billing preferences in the service. You can also contact Thinair to request account closure or help with personal information.

Depending on applicable law, you can have rights to access, correct, delete, or obtain a copy of personal information. You can also have rights to restrict or object to certain processing and to withdraw consent.

We can request information needed to establish your identity and authority before we act on a request. Some requests are subject to legal exceptions or information controlled by your Organization.

Where applicable, you can appeal a decision by contacting us and identifying the request. You can also complain to the relevant data-protection authority.

09International use and children

Thinair uses providers and infrastructure in the United States and other locations. Personal information can cross national borders when you use the service.

Data-protection rules differ between countries. Where required, transfers must use safeguards permitted by applicable law.

Thinair is intended for adults and does not knowingly collect personal information from children under 13. Contact us if you believe that a child provided personal information.

10Policy updates and contact

We will post changes to this policy with an updated effective date. For material changes, we will give additional notice through the service or account email as appropriate.

For privacy questions, requests, or complaints, contact Thinair at the address below. The Terms of Service explain the agreement for use of the service.

Contact Thinair

Thinair Computer Inc.
6 A St, Unit 3
Derry, NH 03038
United States

Terms of Service · Privacy Policy