Privacy policy.

Information we collect

• Account and access information: your email address, the note you submit when requesting access, approval status, account identifier, sign-in records and setup progress.
• Workspace content: automation names, descriptions, instructions, tool availability and schedule details; Queue task titles, context, completion criteria, assignments, status, results and history; Inbox questions, replies and remembered answers; and run inputs, outputs and other results reported by tools. Content may include personal information you or your tools provide.
• Connection information: connected tool names, access permissions, authorization records, credential or token records, expiry and revocation status, and connection activity.
• Technical and usage information: requests, timestamps, errors, usage counts and device or network information, such as IP addresses and browser information, that our infrastructure providers process to deliver and protect the service.
• Communications: information you send us when asking for support or exercising your privacy rights.

We receive information directly from you, from tools you connect and from your interactions with the service. Connecting a tool does not give Automation Host blanket access to that tool’s entire account or chat history; we receive the information sent through the integration.

Browser storage and external resources

We use browser storage for authentication sessions, interface preferences and setup or form recovery. The login form temporarily saves the pending email address and send time, not the code you enter. Clearing or blocking browser storage may sign you out or reset these preferences.

Our current product does not include advertising trackers or third-party marketing analytics. Some pages load fonts from Google Fonts, which receives the network information needed to serve those files. We do not currently respond differently to a browser’s Do Not Track signal.

How we use information

We use information to review access requests, authenticate accounts, save and retrieve workspace content, provide authorized tool connections, coordinate Queue handoffs, deliver login emails, display usage and results, provide support, troubleshoot problems and protect against abuse. We may also use information to meet legal obligations and establish or defend legal claims.

We do not sell personal information or share it for cross-context behavioral advertising. Automation Host does not use workspace content to train general-purpose AI models. A connected AI provider’s use of information is governed by that provider’s terms, settings and privacy policy.

Where applicable law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and securing it, compliance with law, and consent where required. You may withdraw consent for processing based on consent without affecting earlier lawful processing.

Providers and connected tools

• Supabase: provides database, authentication and backend infrastructure for accounts, workspace content and integration records.
• Resend: delivers login emails and processes the recipient address, email content—including the one-time code and login link—and delivery records.
• Tools you authorize: Claude, ChatGPT, Muse, Gemini or other supported tools may retrieve and submit information within the connection’s permissions. Automations are available according to their tool settings; Queue eligibility also depends on assignment and permissions. Read/write tools can change information and report work.
• Operational support: infrastructure providers and authorized people supporting the service may process information as needed for hosting, maintenance, troubleshooting and support.

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect people or the service, investigate abuse, or carry out a merger, acquisition or similar business transaction subject to appropriate safeguards. We may also disclose information at your direction.

Your workspace is not a public directory. Connecting a tool is a disclosure to that provider, and revoking a connection does not remove information it has already received. Third-party services have their own policies and retention practices.

International processing

We and our providers may process information in the United States and other countries whose privacy laws differ from those where you live. Where required, transfers are subject to applicable legal safeguards. Contact us for information about safeguards relevant to your data.

Retention

We retain account and workspace information while needed to provide the service, unless you request deletion or a shorter period applies. Access requests, security and operational records may be retained as needed for review, abuse prevention, troubleshooting and legal obligations. Some records remain after a visible item is removed: for example, the lifetime handoff usage record prevents deleted tasks from resetting a plan allowance.

Archiving an automation or cancelling a task does not delete its content. To request account or workspace deletion, email us. We may retain information required by law or necessary for security or legal claims. Copies in backups and provider systems may remain until their normal retention cycles expire.

Security

We use account authentication, authorization checks, permission-limited connections and other safeguards designed to protect information. No service is completely secure. Protect your email account and connector credentials, and do not include passwords, API keys or sensitive information in task content unless it is necessary and appropriate for the tools involved.

Your choices and rights

You can edit saved information, choose which tools can use an automation, revoke connections in Tools and export your library from Settings. The export currently includes saved instructions and the latest 250 reported runs; contact us if you need help accessing other account information.

Depending on where you live and which laws apply, you may have rights to access, correct, delete or obtain a copy of personal information; object to or restrict processing; withdraw consent; or appeal a decision on a request. You may also complain to your local data protection authority. We will not discriminate against you for exercising rights protected by applicable law.

Send requests or appeals to chase@thinklike.co. We may need to verify your identity and, if someone acts for you, their authority. We respond within the time required by applicable law and explain when we cannot fulfill a request. Do not send identity documents unless we specifically request a secure way to verify you.