At Thinking of U, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, mobile application, and related services.
1. Information We Collect
We may collect the following types of information:
- Personal Information: When you use our services, we may collect your name, email address, and mailing address. Payment information is securely processed by our third-party payment provider, Stripe — we do not store full payment card details on our servers.
- User Content: We collect the messages, prompts, and inputs you provide when creating postcards. These may be processed by AI systems (such as OpenAI) to generate content.
- Notes to your assistant: If you email or forward something to your private desk address, we keep only a note of up to 600 characters taken from it (your own words, and the text of a forwarded message) and file it with the people it names; the original email and any attachments are not stored. Mail to that address is accepted only from the email address on your account.
- Usage Information: We gather data on how you interact with our service, including features used and preferences selected.
- Device Information: We may collect technical information such as device type, operating system, browser type, and IP address.
- Cookies and Tracking: We use cookies and similar technologies to improve your experience, analyze usage, and support core functionality.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services.
- Generate AI-powered postcards based on your inputs.
- Process orders and deliver postcards to recipients.
- Communicate with you about your account, orders, or support requests.
- Monitor usage trends and enhance platform performance.
- Ensure the safety, integrity, and moderation of user-generated content.
Processing may be based on your consent, a contractual obligation, or our legitimate business interests.
3. Sharing Your Information
We do not sell or rent your personal information. We only share your data in these situations:
- With your explicit consent.
- To comply with legal obligations or protect our rights and safety.
- With trusted service providers (e.g., payment processors like Stripe, cloud services like Firebase, AI content providers like OpenAI) who are contractually required to protect your data.
- To prevent fraud or abuse of our platform.
If your data is transferred outside your country, we implement safeguards such as standard contractual clauses or equivalent protections.
4. Google Calendar and Google Contacts (only if you connect them)
Members can connect a Google account so the assistant knows when they last saw the people they’ve added, and when they’re about to. Access is read-only: we cannot create, change, or delete anything in your Google account.
- What we read: events on your primary Google Calendar from the past 90 days and the next 60 days, and the names, email addresses and birthdays in your Google Contacts. We read again once each morning while you stay connected.
- What we keep: for people you have already added to Thinking of U only — the date you were with them, the event’s title (first 60 characters), and a birthday where you hadn’t entered one. We also remember a short reference to each event so it isn’t counted twice. If someone appears in two or more meetings but isn’t one of your people, we may keep their name or email address in a suggestion to you to add them. Everything else read from your calendar and contacts is discarded as soon as it has been read and is never stored.
- How we use it: only to help the assistant decide when, and whether, to reach the people you’ve added, and to show you what it learned. The kept details may be sent to the AI provider that runs the assistant (Anthropic) for that purpose only. We do not use Google user data to serve ads, sell it, or use it to train AI models.
- Your control: you can untick calendar or contacts on Google’s consent screen, strike out any line the assistant learned, and disconnect at any time from your desk, which withdraws our access at Google. You can also remove access from your Google Account’s security settings.
- Security: the credential that lets us read your account is encrypted at rest and is never available to the website or to other users.
Thinking of U’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data Retention
We retain your data only as long as necessary to provide our services and fulfill legal obligations. You may request deletion of your account and associated data at any time.
6. Security
We implement reasonable technical and organizational measures to protect your information, including encryption, access controls, and regular security audits. However, no system is 100% secure, and we cannot guarantee absolute protection.
7. Your Rights and Choices
You have rights regarding your personal data, including the right to:
- Access, correct, or delete your data.
- Withdraw consent where applicable.
- Object to certain types of processing.
- Opt out of marketing communications.
You can manage your data through your account settings or by contacting us at privacy@thinking-of-u.com.
8. Children's Privacy
Our service is not intended for use by children under 13. We do not knowingly collect personal information from children without verifiable parental consent. If you believe we have collected such data, please contact us.
9. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via our website or direct notice. Continued use of our service after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have any questions about this policy or your data, please contact us at privacy@thinking-of-u.com or visit our Contact Us page.