Privacy Policy

1. Who we are

TheThinkForge (“we”, “us”) is an AI agent workspace that helps you turn plain-English outcomes into planned work, drafts, and approvals. This Privacy Policy explains what we collect, why we collect it, and the choices you have.

Questions: support@thethinkforge.com.

2. Information we collect

• Account data. Email address, name if you provide one, password hash (we never store your password in plain text), and Google account identifiers if you use Continue with Google.
• Workspace content. Outcomes, plans, task drafts, approvals, memory notes, prospect records, and files you connect for the team to read.
• Bring-your-own AI keys. If you paste an AI provider API key, we store it so the product can call that provider on your behalf. Keys are treated as secrets: they are not returned by settings APIs and must not appear in logs.
• Connected services. OAuth tokens for services you connect (for example Google Drive or Gmail), used only to provide those features.
• Billing data. Subscription and payment status via Stripe or Razorpay. Card details are handled by those processors, not stored as full card numbers on our servers.
• Technical data. Session cookies, IP address, browser type, and basic server logs needed to run, secure, and debug the service.
• Demo and contact messages. Information you send through Book a demo (including Calendly scheduling), Talk to sales, or email.

3. How we use information

• Provide the product: plan work, run agents, show drafts, and stop for human approval when something is risky.
• Authenticate you, keep sessions secure, and prevent abuse.
• Call the AI provider you configure (your key or a managed run, when offered) so agents can research and draft.
• Read connected folders or Drive content you explicitly link, only to ground agent work in your materials.
• Process subscriptions, send transactional mail, and reply to support requests.
• Improve reliability and safety (crash diagnosis, quality checks). We do not sell personal data.

4. AI processing

Agent prompts can include your outcome text, library excerpts, and related workspace content so the team can do useful work. Those requests go to the model provider you use under that provider’s terms.

• We do not use your private workspace content to train a public foundation model of our own.
• Provider training and retention rules depend on your plan with that provider. Read their privacy policy for BYOK usage.
• Agent output is draft-only by default, except flows you explicitly approve for publishing (such as an AI Twin pipeline you turn on).
• Models can be wrong. Treat drafts as starting points you review before anything goes outside the app.

5. Local folders, iCloud, and Drive

When you connect a local folder or iCloud path on your Mac, TheThinkForge reads files from that path on the computer running the app. Agents and the app never delete or modify any file you already had in those folders. Optional drafts the app saves go only under a ThinkForge folder inside a connected root. Files are not copied into a separate cloud library unless you also connect cloud storage. Google Drive access uses OAuth with a read-only Drive scope.

6. Cookies and similar tech

We use a secure session cookie to keep you signed in. We do not run a third-party advertising or analytics SDK on the marketing site today. Theme preference may be stored in your browser’s local storage.

7. Sharing

We share data only with:

• Infrastructure and mail providers that help us operate the service.
• AI model providers you (or we, for managed runs) call to generate drafts.
• Payment processors for billing.
• Authorities when required by law, or to protect users and the service from fraud or abuse.

We do not sell personal information.

8. Retention and deletion

We keep account and workspace data while your account is active. In the app you can delete your account. That erase removes your user record, settings (including stored API keys), plans, workflows, automations, libraries, campaign data, book projects, billing records we hold, and OAuth tokens we stored. Active payment subscriptions at Stripe or Razorpay are cancelled when possible so charges stop. Payment processors keep their own transaction records under their policies. Short-lived backups and legal retention may remain for a limited time. To request access or export before you delete, email support@thethinkforge.com.

9. Security

We use industry-standard controls for a service of this type: encrypted transport (HTTPS in production), hashed passwords, scoped database queries per user, secret handling for API keys and OAuth tokens, rate limits on sensitive routes, and path jails for local file access. No method of transmission or storage is perfectly secure; report concerns to support@thethinkforge.com.

10. International users

We may process data in the country where our servers or subprocessors operate. If you are in the EEA, UK, or a similar jurisdiction, you may have rights to access, correct, delete, or export personal data, and to object to certain processing. Contact us to exercise those rights.

11. Children

TheThinkForge is built for business users. It is not directed at children under 16, and we do not knowingly collect their personal information.

12. Changes

We may update this policy as the product evolves. Material changes will be reflected on this page with a new “Last updated” date. Continued use after an update means you accept the revised policy.

This page is a product disclosure for TheThinkForge customers and visitors. It is not legal advice. If you need a contract review for your company, ask your counsel.