Privacy Policy

Thoth AI LLC runs Thoth and is responsible for the personal information described in this policy, except for information about your customers and site visitors, which we handle on your behalf (see “Your customers and site visitors” below). Thoth is run from the United States, and your information is stored and processed in the United States. You can reach us at thoth.ai.biz@gmail.com.

• Account details: your email address and a securely stored password, or, if you sign in with Google, your name, email address, and profile picture from your Google account.
• Business content: what you enter or create in Thoth, such as onboarding answers, business plans, website content, products, suppliers, notes, tasks, customers, orders, and your chats with Thoth’s AI.
• Payment information: if you upgrade or accept payments, card, bank, and identity verification details are collected and stored by our payment provider, Stripe. Thoth does not store full card or bank account numbers. We receive limited information from Stripe, such as your plan, payment status, and the last four digits of your card.
• Usage and device data: basic logs such as pages visited, features used, approximate visits to your published site, browser type, and IP address, used to run and secure the service.
• Messages from your website’s visitors: when someone uses the contact or email signup form on a site you published, what they send is saved to your workspace so you can reply.
• Support messages: what you send us when you contact us.
• Cookies: we use essential cookies to keep you signed in and, with your OK, remember layout preferences. We do not use advertising cookies. See the Cookie Policy.

• To create and secure your account and sign you in.
• To provide Thoth’s features, including generating plans, websites, and suggestions with AI.
• To process payments and manage your plan, including renewal reminders and receipts.
• To respond to support requests and send important service messages, such as security alerts and changes to our terms.
• To detect, prevent, and respond to fraud, abuse, security problems, and violations of our Terms.
• To fix problems and improve Thoth, using aggregated or de-identified information where we can.
• To comply with the law and protect our rights.

We do not sell your personal information, and we do not share it for targeted advertising. We do not use your business content to train AI models. If we ever send you marketing emails, every one will include a way to unsubscribe.

If you are in a place, such as the European Economic Area or the UK, that requires a legal basis for processing, we rely on: performing our contract with you (to provide the Service), our legitimate interests (to secure and improve the Service and prevent abuse), your consent (for optional cookies), and legal obligations.

If you choose “Continue with Google,” we receive only your basic profile (name, email address, and profile picture) to create and sign in to your Thoth account. We do not request access to your Gmail, Google Drive, contacts, or other Google data. Thoth’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share information only with service providers that help us run Thoth, and only as needed for them to do that work under their contracts with us:

• Supabase: database hosting and sign-in.
• Vercel: website hosting and privacy-friendly visit counts.
• Anthropic: the AI that powers Thoth. Your messages and relevant business content are sent to generate responses. Under Anthropic’s commercial terms, this content is not used to train its models.
• Stripe: payments, if you upgrade or sell through Thoth.
• Google: sign-in, if you choose it.

We may also disclose information if required by law or legal process, to protect the rights, safety, or property of our users, the public, or Thoth, to investigate fraud or abuse, or as part of a merger, acquisition, financing, or sale of the business, in which case the new owner must continue to protect it as this policy describes.

Websites you publish with Thoth are public. Anything you put on a published site, such as your business name, products, or contact details, can be seen by anyone with the link and may be indexed by search engines.

When you use Thoth to collect information about your customers and site visitors, such as orders, contact messages, and email signups, your business is responsible for that information, and Thoth processes it on your behalf only to provide the Service to you. Each published site includes a basic privacy page explaining this to visitors. You must give your customers any notices the law requires, use their information only for what you told them, honor their requests, and only send marketing emails to people who agreed to receive them. If you are a customer or visitor of a site built with Thoth, contact that business first; we will help them respond to your request.

We keep your information while your account is active. You can delete a business from inside Thoth at any time. If you delete your account, we delete or anonymize your information within 30 days, except where we must keep records for legal, tax, accounting, or fraud-prevention reasons. Copies may remain in backups for a limited time until they are overwritten.

• You can view and edit most of your information inside Thoth.
• You can download a copy of your data any time from Settings (“Download my data”), and delete your account from Settings.
• You can also ask us for a copy of your data, to correct it, or to delete it by emailing thoth.ai.biz@gmail.com. We may need to confirm your identity first, and we will respond within the time the law requires.
• If you signed in with Google, you can remove Thoth’s access at any time from your Google Account settings.
• Depending on where you live, including California and other U.S. states, the EEA, and the UK, you may have additional rights, such as to know what we collect, to opt out of certain uses, to object to or restrict processing, and to complain to a data protection authority. We will not treat you differently for using these rights. Contact us to use them. We honor Global Privacy Control signals.

Thoth is not for children under 13, and we do not knowingly collect personal information from them. If you are under 18, you may use Thoth only with a parent or guardian’s permission. Paying for a plan or accepting payments requires an account holder who is 18 or older. If you believe a child under 13 has given us information, contact us and we will delete it. A parent or guardian of a user under 18 may contact us to review or delete that user’s information.

We use encryption in transit, access controls, and row-level security so each user can reach only their own data. No system is perfectly secure, so please use a strong, unique password and keep your own copies of important content. If we learn of a security breach that affects your personal information, we will notify you and any authorities as the law requires.

We may update this policy. When we do, we will change the date above. If we make significant changes, we will let you know in the app or by email before they take effect.

Questions or requests? Email thoth.ai.biz@gmail.com. See also our Terms of Service.