Privacy Policy

1. Introduction

This Privacy Policy explains how Thesis Tracker ("we," "us," "our") collects, uses, and protects your information when you use trackthesis.org and its related services (the "Service").

2. Information We Collect

• Account information:name and email address, collected and managed through our authentication provider, Clerk, Inc. ("Clerk").
• Payment information:when you subscribe to a paid plan, our payment processor, Paddle.com Market Limited ("Paddle"), collects and processes your billing details, including payment card information. We do not receive or store your full payment card details; Paddle handles this in compliance with PCI-DSS standards.
• User content: investment thesis descriptions, expected KPIs, confidence levels, time horizons, and related data you voluntarily submit to the Service.
• Usage and technical data: log data, IP address, browser type, device information, and pages visited, collected automatically to help us operate and improve the Service.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process subscription payments and manage billing;
• Generate AI-assisted thesis reviews;
• Authenticate your account and secure access;
• Communicate with you about your account or the Service; and
• Comply with legal obligations.

4. Third-Party Service Providers

We rely on the following third-party providers to operate the Service:

• Clerk, Inc. — user authentication and account management.
• Paddle.com Market Limited — subscription billing, payment processing, and tax/VAT compliance (acting as our Merchant of Record).
• Anthropic, PBC— when you request a thesis review, relevant portions of your thesis content are sent to Anthropic's Claude API to generate an AI-assisted review.
• Neon, Inc. — hosting of our application database.

Each provider processes your data under its own privacy policy and terms, and only to the extent necessary to provide their respective service to us.

5. Cookies

The Service uses cookies and similar technologies, primarily set by Clerk, to maintain your authenticated session. We do not use cookies for third-party advertising.

6. Data Retention

We retain your account information and User Content for as long as your account remains active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. You may request deletion of your account and associated data at any time (see Section 8).

7. Data Security

We use commercially reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at support@trackthesis.org. We will respond within a reasonable timeframe and in accordance with applicable law (including GDPR and CCPA, where applicable).

9. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States, by us and our third-party service providers. By using the Service, you consent to this transfer, storage, and processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at support@trackthesis.org.