Privacy Policy

1.1 Information you provide directly. We collect information you give us, including:

• Account information: your name, email address, password, and similar registration details.
• Your Content: the investment theses, claims, notes, text, and other inputs you create or submit within the Service.
• Communications: information you provide when you contact us for support, respond to surveys, or otherwise communicate with us.

1.2 Financial Account Data (via Plaid). If you choose to connect a brokerage or financial account, you do so through our third-party data provider, Plaid Inc. (“Plaid”). This connection is read-only. Through it we receive information such as your holdings, the securities you hold, position sizes, cost basis, and current values (“Financial Account Data”). We do not receive your brokerage login credentials; you provide those directly to Plaid. We do not execute trades, move funds, or take custody of any assets. Your use of Plaid is also governed by Plaid’s own end-user privacy policy.

1.3 Payment information. Paid subscriptions are processed by our payment processor, Stripe, Inc. (“Stripe”). Stripe collects and processes your payment-card and billing information directly. We do not store full payment-card numbers; we receive limited information such as billing status, the last four digits of your card, and subscription details. Stripe’s handling of your information is governed by Stripe’s privacy policy.

1.4 Information we collect automatically. When you use the Service, we and our service providers may automatically collect technical and usage information, such as your device and browser type, IP address, pages and features used, and interactions with the Service. We collect this through cookies and similar technologies (see Section 5).

1.5 Information from third-party data sources. The Service incorporates market and reference data from third-party sources such as financial-data providers, regulatory filing systems (including SEC EDGAR), news sources, and macroeconomic data providers. This data is generally not personal to you; it becomes associated with you only when matched against the positions or claims you choose to document.

We use the information we collect to:

• Provide, operate, maintain, and secure the Service;
• Generate the alerts, scores, summaries, and other outputs that are core to the Service, by relating external developments to the claims you have documented;
• Process your subscription, payments, and account management;
• Communicate with you, including sending transactional messages (such as account, security, and billing notices) and, where permitted, product and marketing messages;
• Develop, test, and improve the Service, and develop new products, features, and services;
• Analyze usage and performance, and conduct research and analytics;
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues; and
• Comply with legal obligations and enforce our Terms of Service.

2.1 Use of Your Content. As described in our Terms of Service, you grant us a broad license to use Your Content (your theses, notes, and inputs) for business purposes, including to operate and improve the Service, to train and improve our models and systems, to develop new products and features, and to generate de-identified and aggregated data and insights.

2.2 Use of Financial Account Data. We treat Financial Account Data more restrictively than other information. We use Financial Account Data to provide the Service to you, for example to match your holdings and positions against the claims you document and to generate relevant alerts. We do not apply the broad content license described in Section 2.1 to Financial Account Data. Beyond providing the Service to you, we use Financial Account Data only in de-identified or aggregated form, and our use is further limited by our agreements with Plaid and other data providers and by applicable law.

We may create de-identified or aggregated data from the information we collect, including from Your Content and Financial Account Data. De-identified or aggregated data does not identify you and is not treated as personal information. We may use and share this data for any lawful purpose, including to analyze trends, improve and develop products, and describe our Service. Where we hold information in de-identified form, we will maintain and use it without attempting to re-identify it, except as permitted by law to test our de-identification processes.

We do not sell your personal information. We share information only as described below:

• Service providers. We share information with third parties that perform services for us, such as cloud hosting, data processing, payment processing (Stripe), account connectivity (Plaid), email and communications delivery, customer support, and analytics. These providers may use the information only to perform services for us.
• Legal and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Thesis, our users, or others, or to enforce our Terms of Service.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.
• With your direction or consent. We may share information when you ask us to or otherwise consent.
• De-identified or aggregated data. We may share de-identified or aggregated data as described in Section 3.

WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION FOR ADVERTISING OR CROSS-CONTEXT BEHAVIORAL ADVERTISING. IF THIS PRACTICE EVER CHANGES, WE WILL UPDATE THIS PRIVACY POLICY AND PROVIDE ANY CHOICES REQUIRED BY LAW BEFORE DOING SO.

We and our service providers use cookies and similar technologies to operate and secure the Service, remember your preferences, understand how the Service is used, and improve it. Some cookies are necessary for the Service to function; others support analytics and performance. You can control cookies through your browser settings, though disabling some cookies may affect how the Service works. Where required by law, we will request your consent for non-essential cookies.

• Account information. You can review and update your account information through your account settings.
• Marketing emails. You can opt out of marketing emails at any time using the unsubscribe link in those emails or by contacting us. You may still receive transactional messages about your account, security, and billing.
• Disconnecting financial accounts. You can disconnect a connected brokerage or financial account at any time, which stops further collection of Financial Account Data through that connection.
• Cookies. You can manage cookies through your browser as described in Section 5.

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need personal information, we will delete or de-identify it. Note that de-identified and aggregated data, and copies of Your Content used to train or improve our models as permitted by our Terms of Service, may persist after your account is closed.

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, delete, or receive a copy of your personal information, and the right not to be discriminated against for exercising these rights. To exercise any of these rights, contact us using the information in Section 12. We will respond as required by applicable law and may need to verify your identity before acting on your request.

California residents. To the extent the California Consumer Privacy Act applies, we do not sell or share personal information as those terms are defined under California law. California residents may exercise the access, deletion, and correction rights described above.

We use administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us of any suspected unauthorized use of your account.

The Service is intended for users who are at least 18 years old, or the age of majority in their jurisdiction if higher. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it.

The Service is offered from and operated in the United States, and your information is processed and stored in the United States. We make no representation that the Service is appropriate or available outside the United States. If you access the Service from another jurisdiction, you do so on your own initiative and are responsible for compliance with local law, and you understand that your information will be processed in the United States.

Changes. We may update this Privacy Policy from time to time. If we make material changes, we will provide notice, such as by posting the updated policy with a new “Last Updated” date or by other means required by law. Your continued use of the Service after the update takes effect constitutes acceptance of the revised policy.

Contact. If you have questions or requests regarding this Privacy Policy or your personal information, contact us at: Thesis Technologies, Inc., juanromero@mythesis.ai, 130 East 61st Street, 10065, New York City, New York.