Privacy Policy
Effective: February 16, 2026
1. Introduction
2. Information We Collect
2a. Information You Provide
- Account information: When you create an account, we collect your email address, username, and display name. If you sign in via OAuth (Google, GitHub, or Discord), we receive your name, email, and provider account ID from the OAuth provider.
- Profile information: Display name and bio that you choose to add to your profile.
- User content: Signals, comments, organization listings, upvotes, and impact ratings you submit to the Platform.
- Communication preferences: Whether you opt in to the daily email digest.
2b. Information Collected Automatically
- Usage data: We use Vercel Analytics to collect anonymous, aggregated data about page views and web performance (Core Web Vitals). Vercel Analytics does not use cookies and does not track individual users across sites.
- Authentication tokens: We use secure, httpOnly session cookies managed by Supabase for authentication purposes only. These are not used for tracking.
- Server logs: Our hosting provider (Vercel) may collect standard server logs including IP addresses, request timestamps, and user agent strings for security and operational purposes.
3. How We Use Your Information
- To provide, maintain, and improve the Platform
- To authenticate your identity and manage your account
- To display your submitted content (signals, comments, organizations) on the Platform
- To send you the daily email digest, if you have opted in
- To enforce our Terms of Use, including content moderation and ban enforcement
- To monitor Platform health and performance via anonymous analytics
- To respond to your inquiries or requests
4. AI Processing
When you submit a URL for signal generation, the content at that URL is sent to third-party AI services (Anthropic Claude and xAI Grok) for analysis. These services process the content to generate a signal title, thesis, sector classification, and impact assessment.
The AI-generated signal agent also uses these services to automatically discover and post signals from publicly available sources.
We do not send your personal information (email, name, profile data) to AI services. Only the URL content and prompts related to signal generation are shared.
5. Information Sharing
We do not sell, rent, or trade your personal information to third parties.
We may share information with:
- Service providers: Supabase (database, authentication), Vercel (hosting, analytics), Anthropic and xAI (AI signal generation), Resend (email delivery), and Discord (community integration). These providers process data on our behalf and are subject to their own privacy policies.
- Public display: Your username, display name, submitted signals, comments, organizations, and upvotes are publicly visible on the Platform. Your email address is never publicly displayed.
- Legal requirements: We may disclose information if required by law or if we believe disclosure is necessary to protect rights, safety, or property.
6. Data Storage & Security
Your data is stored in Supabase (hosted on AWS in the us-east-2 region). The Platform is hosted on Vercel. Both providers implement industry-standard security measures including encryption in transit (TLS) and at rest.
We implement Row Level Security (RLS) policies on all database tables to ensure users can only access and modify data they are authorized to.
While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Cookies & Tracking
ThinkEnix uses minimal cookies:
- Authentication cookies: Secure session cookies managed by Supabase, required for login functionality. These are httpOnly and not accessible to JavaScript.
We do not use advertising cookies, social media tracking pixels, or cross-site tracking technologies. Vercel Analytics is cookie-free and privacy-friendly.
8. Your Rights & Choices
- Access & edit: You can view and edit your profile information at any time through your account settings.
- Email preferences: You can opt in or out of the daily email digest in your settings.
- Content removal: You can request removal of your submitted content by contacting us.
- Account deletion: You may request deletion of your account and associated data by contacting us at the email address below. We will process deletion requests within 30 days.
- Data portability: You may request a copy of your data by contacting us.