Privacy Policy

This policy describes how Thogits Limited (“we”) handles information when you use thogits.com, the web app at app.thogits.com, the iOS app, and related services (the “Service”). The iOS app is for iPhone only for now. On iPad, use the web app in a browser. The Service is in beta.

Who we are

Thogits Limited is a New Zealand company (company number 9421313). Privacy contact: support@thogits.com. For records an organisation stores about its members or customers, that organisation decides how those records are used. We process them to provide the Service.

What we collect

How we use it

Subprocessors

Companies that process data for us:

Where data lives

Production databases and file storage are in the United States. We do not currently offer a region that keeps data only in the European Union.

Operator access

People who operate Thogits can access the systems that host the Service in order to run it and fix problems. We do not sell your workspace data.

Retention and deletion

You can delete your account in the iOS app and the web app: open Settings, then Delete account. You can also email support@thogits.com and ask us to delete it.

Deleting your account removes your login and personal details, your choice about sharing data with AI, and any response reports. Deleting your account deletes that person's events.

If you are the only member of an organisation, that organisation is deleted too, including its agents, messages, pages, and files, and its subscription is cancelled.

If an organisation has other members, you are removed from it and your name is taken off shared work. The shared work stays with that organisation.

We keep a minimal anonymous record (an internal ID and dates) and the billing and usage records a shared organisation still needs. Those records do not include your identity. Backups may hold copies for a limited time.

Cookies and visit measurement

The product uses a sign-in cookie to keep you signed in. On thogits.com a visitor cookie named thogits_visitor on .thogits.com lasts up to 400 days. The purpose is to see which articles are read and which ones lead to a signup. The fields collected are an article id, a section id, a link path or domain, an active-time bucket, a referrer domain, utm parameters, scroll depth, a variant, and a landing path. IP addresses are not stored. The full user agent is not stored. Event data is not sent to ad networks.

Raw events, touches, and visitor rows are deleted after 25 months, except rows still needed to explain a signup until that signup's own 25-month window ends. Deleting your account deletes that person's events. A person can ask for deletion of a visitor id they can show. Opt out at /analytics-choices. Global Privacy Control and Do Not Track are honored.

Contact

Privacy questions: support@thogits.com.