Privacy Policy

1. Introduction

ThinkSpatial ("we," "us," or "our") makes guided experiences of properties, places and people that visitors explore by asking questions, and a workspace for building them. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit thinkspatial.ai, open a guided experience we publish (including one shared by link or placed on a client's website), or use the workspace (together, the "Service").

2. Information We Collect

Information You Provide

• Account information (name, email address, password)
• Profile information you choose to add
• Content you create (projects, notes, knowledge maps)
• Voice conversations when you use voice features (audio is processed in real time and not stored; written transcripts are saved with your session)
• Payment information (processed by Stripe; we do not store card numbers)
• Communications with us (support requests, feedback, project enquiries)

Information Collected Automatically

• Device information (browser type, operating system)
• Usage data (features used, pages visited, interaction patterns)
• Log data (IP address, access times, error logs)
• Cookies and similar technologies

3. Visitors to a Guided Experience

You do not need an account to open a guided experience, and it does not ask for your name or contact details. We record which pages you open and how you move through them, using the analytics described under Cookies below, so we can see how the experience is used and improve it.

Public previews play pre-recorded answers and do not use your microphone. In a live walkthrough, if you choose to speak, your voice is streamed to an AI provider to produce the reply, as described under AI Processing and Voice Data.

4. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your account
• Send you technical notices and support messages
• Respond to your requests and communications
• Analyze usage patterns to improve the user experience
• Detect, prevent, and address technical issues and abuse
• Generate anonymized, aggregated analytics

5. AI Processing

When you interact with AI features, your input is sent to third-party AI providers (including Anthropic, OpenAI, and Google) for processing. These providers process your data according to their own privacy policies and data processing agreements. We send only the minimum context necessary for the AI to provide relevant responses.

AI providers may use your interactions to improve their models unless we have opted out on your behalf. We use API access (not consumer products) which typically excludes training use.

6. Voice Data

Voice interactions are processed in real time via WebRTC connections to AI providers. Audio is streamed and not stored on our servers. In the workspace, a written transcript of each voice conversation is saved with your session, so the conversation can be continued, reviewed, and turned into project content.

7. Data Sharing

We do not sell your personal information. We may share information with:

• Service providers: hosting (Vercel), database (Supabase), payments (Stripe), error monitoring (Sentry), AI providers, and analytics tools that help us operate the Service
• Legal requirements: when required by law, regulation, or legal process
• Safety: to protect the rights, safety, and property of our users and the public
• Business transfers: in connection with a merger, acquisition, or sale of assets

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at hello@thinkspatial.ai.

11. Cookies

We use essential cookies for authentication and session management. We use PostHog for analytics. It stores an identifier in your browser (in local storage and a cookie), records the pages you visit and how you use them, and may record your session on the page (clicks, scrolling, and what is on screen) with anything you type into a form field masked. If your browser sends a Do Not Track signal, PostHog records nothing. You can also control cookies through your browser settings.

12. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

13. International Users

Your data may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

15. Contact Us

For privacy-related questions or concerns, contact us at hello@thinkspatial.ai.