Privacy Policy

This Privacy Policy explains how ThinkBench, Inc. ("ThinkBench," "we," "us," or "our") collects, uses, and shares information when you use our websites at thinkbench.com and app.thinkbench.com, our products Docs and Viz, and related services (together, the "Service"). By using the Service, you agree to the practices described here.

1. Information we collect

Information you provide

• Account information. When you create an account, we collect your name, email address, and a password. Passwords are stored only in hashed form. If you join an organization, we also associate your account with that organization and your role in it.
• Your content. We store the documents, datasets, visualizations, comments, prompts, uploaded files, and other material you create or upload in Docs and Viz (your "Content").
• Billing information. When you subscribe, our third-party payment processor collects your payment details. We receive limited billing data — such as the last four digits of your card, its expiration, and your billing address — but we never receive or store full card numbers.
• Communications. When you contact us for support or sales, or subscribe to updates, we keep the information you send, including your messages and contact details.

Information we collect automatically

• Usage and log data. We record how you interact with the Service — pages and features used, actions taken, timestamps, referring pages, and similar diagnostic data.
• Device and connection data. We collect your IP address, browser type, operating system, device identifiers, and language settings.
• Session replay and error data. To debug problems and improve the Service, our observability provider may capture error reports and session replays that reconstruct how the interface behaved during your visit. We configure these tools to mask sensitive fields where practical.
• Cookies. We use cookies and similar technologies as described in Cookies and tracking below.

2. How we use information

We use the information above to:

• Provide, operate, maintain, and secure the Service;
• Process the AI requests you make and return results (see AI features and your content);
• Enable collaboration, sharing, and real-time editing between you and people you invite;
• Process payments, manage subscriptions, and send billing notices;
• Respond to your requests and provide customer support;
• Monitor performance, diagnose problems, and improve and develop features;
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our Terms of Service.

For users in the European Economic Area and the United Kingdom, we process personal data to perform our contract with you, to pursue our legitimate interests in operating and improving the Service, to comply with our legal obligations, and, where required, with your consent.

3. AI features and your content

Docs and Viz include AI features. When you use them, the relevant Content — such as the text you are editing, the data you are analyzing, or the prompt you write — is processed to generate the result you asked for. Here is how we handle that:

• We do not train AI models on your Content. ThinkBench does not use your Content to train, fine-tune, or otherwise improve any machine-learning model — ours or anyone else's.
• Our providers don't train on it either. Some AI features are powered by third-party large-language-model providers that we reach through our own AI gateway. Your Content is sent to these providers only to generate the output you requested, and we work with them under terms that prohibit using your Content to train their models. Providers process your input transiently to return a result.
• Some AI runs on our own infrastructure. Certain features, such as our text-diffusion editing, run on models we operate on our own managed compute rather than through outside model providers.
• AI output is generated for you. AI-generated results can be inaccurate or incomplete. You are responsible for reviewing them before you rely on them, as described in our Terms of Service.

4. How we share information

We share information only in the following circumstances:

• With your collaborators. When you share Content or work within an organization, we make that Content and related information available to the people and teams you choose.
• With service providers. We share information with third-party service providers who process it on our behalf to run the Service, under contracts that require them to protect it and use it only to provide services to us.
• For legal reasons. We may disclose information if required by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud.
• In a business transfer. If ThinkBench is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you of any change in control or use of your personal information.
• With your consent or at your direction.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. Service providers

We rely on a small set of trusted third-party service providers to run the Service. They process information only on our behalf and only to provide services to us, under contracts that require them to keep it confidential and secure. These providers fall into categories such as:

• cloud hosting, storage, content delivery, and related infrastructure;
• AI model providers that process your inputs to generate the results you request;
• payment processing and subscription billing;
• email and other communications delivery; and
• analytics, performance monitoring, and error reporting.

The specific providers we use may change as the Service evolves, and we choose providers that are contractually bound not to use your Content to train AI models. If you need more detail about the providers that process personal data on our behalf — for example, to support a data processing agreement — contact us at privacy@thinkbench.com.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete Content or close your account, we delete or de-identify the associated personal information within a commercially reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. Backups and logs that contain your information are purged on a rolling schedule.

7. Security

We protect your information with encryption in transit, access controls, and other technical and organizational safeguards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your account credentials confidential, and let us know promptly if you believe your account has been compromised.

8. International data transfers

We are based in the United States and process information there and in other countries where we or our service providers operate. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States. Where required, we use appropriate safeguards, such as the Standard Contractual Clauses, for transfers of personal data out of the European Economic Area or the United Kingdom.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information; to object to or restrict certain processing; and to withdraw consent. You can access and update much of your information directly in your account settings, or export your Content at any time. To make any other request, contact us at privacy@thinkbench.com. We will not discriminate against you for exercising these rights.

EEA and UK residents. You have the rights described above under the GDPR and UK GDPR, and you may lodge a complaint with your local supervisory authority.

California residents. Under the CCPA/CPRA, you have the right to know what personal information we collect and how we use and disclose it, to request access and deletion, to correct inaccurate information, and to be free from discrimination for exercising your rights. As noted above, we do not sell or share your personal information as those terms are defined under California law, so there is nothing to opt out of.

10. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how it is used. Strictly necessary cookies are required for the Service to function; others help us measure and improve performance. You can control cookies through your browser settings, though blocking some cookies may affect how the Service works. We do not use cookies for third-party advertising.

11. Children's privacy

The Service is intended for business and professional use and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us at privacy@thinkbench.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the effective date above and, where appropriate, notify you by email or through the Service. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@thinkbench.com. You can also reach our team about legal matters at legal@thinkbench.com.