Privacy Policy
Effective: October 7, 2026
1. Introduction
2. Information We Collect
2a. Information You Provide
- Submission email: Your email is required to submit a signal. We keep it private, show it only to site admins, and add it to the ThinkEnix mailing list in Resend.
- Signal content: Titles, descriptions, links, and organization tags you submit. Signals are public only after admin approval.
- Mailing-list preferences: Subscription and unsubscribe status. You can unsubscribe using the link in any email.
2b. Information Collected Automatically
- Usage data: We use Vercel Analytics to collect anonymous, aggregated data about page views and web performance (Core Web Vitals). Vercel Analytics does not use cookies and does not track individual users across sites.
- Authentication tokens: Private admins use Supabase session cookies. Visitors receive a signed, httpOnly cookie that remembers upvotes without an account. Hashed request identifiers help limit spam.
- Server logs: Our hosting provider (Vercel) may collect standard server logs including IP addresses, request timestamps, and user agent strings for security and operational purposes.
3. How We Use Your Information
- To provide, maintain, and improve the Platform
- To verify private admin access and prevent spam
- To display approved signals and organization listings on the Platform
- To add submitters and subscribers to the mailing list and send updates
- To enforce our Terms of Use, including content moderation and ban enforcement
- To monitor Platform health and performance via anonymous analytics
- To respond to your inquiries or requests
4. SI Processing
When you submit a URL for signal generation, the content at that URL is sent to a third-party SI service (xAI Grok) for analysis. This service processes the content to generate a signal title, thesis, sector classification, and impact assessment.
The SI-generated signal agent also uses this service to automatically discover and post signals from publicly available sources.
We do not send your personal information (email, name, profile data) to SI services. Only the URL content and prompts related to signal generation are shared.
5. Information Sharing
We do not sell, rent, or trade your personal information to third parties.
We may share information with:
- Service providers: Supabase (database, authentication), Vercel (hosting, analytics), xAI (SI signal generation), and Resend (email delivery). These providers process data on our behalf and are subject to their own privacy policies.
- Public display: Approved signals, organization listings, and aggregate upvote counts are publicly visible on the Platform. Submitter names and email addresses are not publicly displayed.
- Legal requirements: We may disclose information if required by law or if we believe disclosure is necessary to protect rights, safety, or property.
6. Data Storage & Security
Your data is stored in Supabase (hosted on AWS in the us-east-2 region). The Platform is hosted on Vercel. Both providers implement industry-standard security measures including encryption in transit (TLS) and at rest.
We implement Row Level Security (RLS) policies on all database tables to ensure users can only access and modify data they are authorized to.
While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Cookies & Tracking
ThinkEnix uses minimal cookies:
- Authentication cookies: Secure session cookies managed by Supabase, required for login functionality. These are httpOnly and not accessible to JavaScript.
We do not use advertising cookies, social media tracking pixels, or cross-site tracking technologies. Vercel Analytics is cookie-free and privacy-friendly.
8. Your Rights & Choices
- Access & edit: You can request access to or correction of your submission data by contacting us.
- Email preferences: Use the unsubscribe link in any ThinkEnix email to stop receiving updates.
- Content removal: You can request removal of your submitted content by contacting us.
- Data deletion: You may request deletion of your personal information by contacting us at the email address below. We will process deletion requests within 30 days.
- Data portability: You may request a copy of your data by contacting us.