Privacy Policy

Who we are

ThinkerStreet is operated by ThinkerStreet LLC (“we”, “us”), a United States company. We are responsible for your personal information (the “controller” under EU and UK law). Questions about this policy or your data: shap9867@thinkerstreet.com.

What we collect, why, and for how long

We collect only what the service needs to work. You can use the chat without an account; signing in adds saved projects.

We do not ask for sensitive information (such as health, financial or government ID details), and we do not use what you write to profile you. If you choose to put such information in a chat or file, it is handled like the rest of your content: stored only in your account and sent to an AI provider only to answer you.

AI providers

Answers are generated by AI models run by third-party AI providers on our behalf. We send them only what is needed for the answer: your message, recent context and the files involved. Every model we use is configured for zero data retention: the provider processes the request, returns the answer and does not keep your prompts or answers, or use them to train models.

AI answers can be wrong. Please check anything important, and avoid sharing information you are not allowed to share.

Who we share with

We do not sell your personal information, and we do not share it for advertising. We share it only with companies that run parts of the service for us, under contracts that limit them to that job:

• Supabase: sign-in, database and file storage.
• AI providers: to generate answers, under zero data retention.
• DigitalOcean: the servers ThinkerStreet runs on.
• GitHub: only if you connect it, and only the repositories you link.

We may also disclose information when the law requires it, to protect people from harm, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.

Cookies and browser storage

We use no advertising or analytics cookies. Your browser keeps a few things for you in its own storage: your sign-in session, a copy of your recent chats so the page loads quickly, and preferences such as your chosen intelligence level and Agent mode. One short-lived cookie (10 minutes) is set only while you connect GitHub, to keep that sign-in secure. Clearing your browser’s site data removes everything stored there.

Your rights and choices

Wherever you live, you can ask us to:

• See the personal information we hold about you, and get a copy you can take elsewhere.
• Correct anything that is wrong.
• Delete your account and data. You can delete projects, chats and files yourself at any time.
• Unsubscribe from the newsletter, using the link in any letter or by emailing us.

Email shap9867@thinkerstreet.com. We will confirm the request comes from you, usually by replying to your account’s email address, and respond within one month (45 days where US state law allows). We never treat you differently for using your rights. You can also ask someone to act for you; we may ask for proof that they have your permission.

If you are in the EU or UK (GDPR)

We rely on these legal bases:

• Contract: your account, projects and AI answers, because they are the service you asked for.
• Legitimate interests: usage limits, security, abuse prevention, server logs and visitor counts, kept to the minimum and weighed against your rights.
• Consent: the newsletter and connecting GitHub. You can withdraw consent at any time.
• Legal obligation: when the law requires us to keep or disclose information.

Under the GDPR and UK GDPR you also have the right to restrict or object to our use of your information, and to data portability. If you are unhappy with how we handle your data, please tell us first; you can also complain to your local data protection authority (in the UK, the ICO).

If you are in the United States (California and other states)

Under the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other states, here is what we collected in the last 12 months: identifiers (email address, IP address, account ID), account and newsletter details, usage information (the usage records above), and the content you create. We collect it for the purposes in the table above and disclose it only to the service providers listed. We do not sell or share personal information, including for cross-context behavioral advertising, and we do not use sensitive personal information to infer things about you, so there is nothing to opt out of; we honor Global Privacy Control signals all the same. You have the right to know, access, correct and delete, and not to be discriminated against for using these rights. If we decline a request, you can appeal by replying to our decision; if the appeal is denied, you can contact your state attorney general.

Where your data is processed

ThinkerStreet LLC is a United States company and runs ThinkerStreet from the United States. Our providers may process data in the United States and other countries. When personal information from the EU, UK or Switzerland is transferred, we rely on our providers’ Standard Contractual Clauses (and the UK addendum) or their certification under the EU-U.S. Data Privacy Framework, where applicable.

Security

Connections are encrypted (HTTPS). Each account can reach only its own data, enforced in the database itself. GitHub tokens are stored encrypted, and visitor counts use a one-way code rather than your IP address. No system is perfectly secure; if a breach affects your personal information, we will tell you and the authorities as the law requires.

Children

ThinkerStreet is not intended for children under 13, or under 16 in the EU and UK, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we use your information, we will tell you on the site or by email before it takes effect.