Who operates ThruNote
The operator’s legal name, business address, country, and privacy contact are awaiting confirmation. A contact channel for privacy requests will be added before this policy is finalized.
Information you provide
ThruNote stores account details such as your name and email address, along with the documents, versions, notes, sources, and preferences you save in your workspace.
When you request AI assistance, the relevant writing and instructions are processed to produce the requested result. Document text, saved versions, and AI request inputs are encrypted in the application’s database. Encryption does not mean an AI provider cannot receive the text needed to process your request.
Services that process information
ThruNote uses services for hosting, storage, email, payments, and AI processing. The final provider list, processing locations, international transfer information, and provider retention terms are awaiting confirmation. This draft does not make a promise about how external providers train models or retain data.
Cookies and visit analytics
Essential cookies support sign-in, request security, and saving your cookie choice. Optional visit analytics stay off until you choose to allow them. Choosing “Essential only” keeps visit analytics off.
If you allow visit analytics, ThruNote records the page path, route, referring website’s hostname, device category, visit time, a hashed session identifier, and your account ID when signed in. Visit records do not include the text of your documents.
Your choice is remembered for 180 days in this browser. Use “Cookie settings” to change it. Withdrawing consent stops future optional visit records; it does not automatically delete records already stored.
Service operation and diagnostics
Service diagnostics are separate from optional visit analytics. ThruNote records limited operational events such as request status, timing, and usage counts to operate the service. When enabled, these events are sent to PostHog under a shared service identifier. This telemetry excludes document text and user or session identifiers. The visit analytics choice does not disable these operational events.
Your controls and retention
You can edit account details and request account deletion in profile settings. Saved documents and version history support your writing workflow. Account deletion follows the status and grace period shown in your account; it is not an immediate deletion of every record.
The final retention schedule for writing, analytics, backups, and billing records is awaiting confirmation, along with the process for access, correction, and deletion requests outside the app.
Before this policy is finalized
This draft still needs confirmed operator and contact details, the purposes and legal bases for processing, provider and transfer disclosures, retention periods, and the applicable privacy rights and complaint process. It has no effective date yet.