What we keep, and why.

Who this covers

Thinked is used by agencies (our customers) and by the founders they write for (their clients). This page covers both, and the visitors to this website.

What we collect

Accounts

Name and email address, for agency operators and for the people an agency lists against a client. Sign-in codes are emailed and expire in ten minutes; we keep no passwords.

Client material

What a founder sends through their capture page: voice notes and their transcripts, screenshots, pasted text, and links. What an agency writes from it: drafts, the sources each line is built on, the limits set on the material, approvals, and the reasons a post was sent back. Each of these carries the time it happened and who did it, because that record is the point of the product.

Analytics and errors

When an instance has analytics enabled, we record page views, the actions taken in the product (a post sent for approval, a decision made, a hand-off), and errors, attributed to the signed-in person. We do not record the words of posts, notes or material in analytics. Automatic capture of clicks and typed text is off.

This website

We count page views and which calls to action were clicked. If a visitor accepts optional marketing measurement, Whop also receives one visit to the public landing page for marketing and attribution. That event includes the landing page URL without its query or fragment, browser and device information, and a browser identifier. Thinked suppresses the referring page and does not send client material, account data, typed text, or app activity to Whop.

The choice is stored for six months in the first-party thinked_marketing_consent cookie. Whop is not loaded before acceptance. A visitor can reopen Privacy choices on the landing page and choose Reject to withdraw; the page reloads without Whop tracking.

Why

To run the product: sign people in, show each person what they are allowed to see, send the emails the workflow needs (a code, an invitation, a post waiting for approval, a decision), and hand approved copy to the publishing tool an agency has connected. To keep it working: know when something breaks. Nothing else.

Who else sees it

• Resend delivers our email. It sees the recipient address and the message.
• X receives approved posts when a founder has connected their account, and only then, from that account.
• PostHog receives analytics and error reports when an instance has enabled them.
• Whop receives the optional public landing-page event described above to measure and attribute visits to purchases.
• LinkedIn returns the connected member’s public profile-picture URL under the existing profile permission. Thinked stores that URL and its bounded image optimiser may cache a resized copy; access tokens are never placed in image URLs.
• unavatar.io is asked by Thinked’s bounded image optimiser for a profile picture matching a public X handle. A resized copy may live in the deployment’s image cache, but no picture is written to the Thinked database or data volume and the visitor’s browser does not contact Unavatar.

We do not sell data or use client material for advertising or to train models.

Where

Our hosted instance runs on servers in the European Union. Agencies that self-host keep everything on their own server; we never see it.

How long

For as long as the agency’s account exists. An agency can archive a client at any time and ask us to delete the client, or the whole account, at which point the material, drafts and approvals are removed from the live database and from backups within thirty days.

Your rights

You can ask what we hold about you, ask for it corrected, ask for it removed, or ask for a copy, by writing to hello@thinked.so. If you are a founder working with an agency, your material belongs to the relationship with that agency; we will act on requests together with them.

Who we are

Thinked is operated by [operating entity], [address]. Questions about this policy go to hello@thinked.so.