Privacy Policy

Account information may include your name, reply email, authentication details, phone number when supplied, profile settings, risk preferences, notification choices, and support communications.

Product information may include research you view or save, votes, bookmarks, feed preferences, risk limits, order defaults, paper order activity, paper portfolio snapshots, and inputs you submit to available features. Some on-screen scenario and decision information may remain only in browser memory unless the product says it is saved.

Connection information may include broker account identifiers, connection status, permissions, encrypted credentials where a first-party connection requires them, and technical records used to secure and audit a connection. Thesis does not ask for your brokerage password or two-factor authentication code.

Technical information may include device and browser type, IP-derived security signals, push-notification endpoints, time zone, error logs, and records of how the service is used.

We use information to create and secure accounts, deliver research and decision-support features, personalize the product, maintain paper broker connections, provide notifications, answer support requests, investigate abuse, improve reliability, and comply with applicable obligations.

We do not sell personal information. We do not use personal information for third-party behavioral advertising.

When Thesis makes an automated or AI-assisted feature available, information you provide to that feature may be processed to organize source-linked research, compare scenarios, or prepare user-reviewed trade structures. Any resulting output can be incomplete or wrong, so material information should be checked against the linked source and current broker data.

Supported brokers and market-data providers process information under their own terms and privacy notices. Current order routing is limited to paper environments. Thesis does not custody customer funds or securities.

Current service providers include Cloudflare for site delivery, security, and privacy-first Web Analytics; Supabase for database, authentication, and server functions; Google for optional sign-in; Alpaca and Interactive Brokers for supported paper broker and market-data connections; and browser or device services for push notifications. Market-data sources such as Finnhub and FRED generally provide data to Thesis. Provider availability and roles can change.

We may disclose information when required by law, to protect users or the service, to investigate fraud or security incidents, or as part of a business reorganization where appropriate safeguards apply.

The marketing site uses Cloudflare Web Analytics for aggregate pageview and performance measurement. Its automatically injected beacon reports to a same-domain Cloudflare endpoint, and Cloudflare states that Web Analytics does not collect or use visitors' personal data. Thesis does not currently use advertising cookies on the marketing site. The application uses browser storage and similar technologies that are necessary for authentication, security, preferences, and service operation.

Retention periods depend on record type and purpose, including service delivery, security, audit, dispute resolution, and legal obligations. Some operational records have shorter scheduled retention periods; other records may be kept while reasonably needed. Use the Contact form with a question or deletion request about a particular record.

We use administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security.

You can update many account and privacy settings inside Thesis. You may also request access, correction, deletion, or another privacy right available in your jurisdiction through the Contact form. We may need to verify your identity before completing a request, and some records may be retained where the law or legitimate security needs require it.

You can disable browser notifications through your device or browser settings. Where Thesis provides a broker disconnect control, you can use it; for another supported connection, use the Contact form to ask about disconnection.

Service providers may process information in countries other than your own. Transfer requirements depend on provider locations and applicable law. Use the Contact form for information about a provider used for your account.

We may update this Policy as the service changes. The effective date above identifies the current version. Where applicable law requires additional notice or consent, we will use an appropriate channel available to us.