Privacy Policy
Last updated: 30 October 2026
This policy explains what [legal entity name], [address] ("Thoughtwake") collects when you use Thoughtwake, why, and who helps us handle it.
What we collect
- Your Google account name, email address and picture, when you sign in.
- Audio, when the presenter turns recording on.
- Live transcripts of the talk.
- Widget output, such as key points, questions and resources.
- Session titles and settings.
- Usage and cost records.
- Credit and purchase records: Stripe identifiers, amount and status. We never receive card numbers.
- Invite requests: your email address and a hashed form of your IP address, used to limit abuse.
- A sign-in cookie, and local browser storage for your preferences.
Why we use it
To run the service, bill credits, prevent abuse and support you.
Audience viewers
People who join a session with a code need no account. We store no viewer identities.
Google Drive
Only when a presenter chooses Save to Drive. We use Google's drive.file scope, which lets Thoughtwake reach only the files it creates.
AI processing
Transcripts and widget prompts are sent to Anthropic to generate widget output. [Confirm against Anthropic's current commercial terms: data sent through its API is not used to train its models.]
How long we keep it
Sessions are kept until the presenter deletes them in My sessions, or until you ask us to. Purchase records are kept for as long as tax and accounting law requires. [Concrete retention periods to be decided by the owner.]
Your choices
You can ask to see, export (as Markdown, or to Drive) or delete your data by emailing invite@thoughtwake.com.
Security
We use encrypted connections (TLS), keep secrets encrypted, and give our systems only the access they need. No system is perfectly secure, so we cannot promise absolute protection.
Children
Thoughtwake is not directed at children under 13. If you use it in a class with minors, your institution should agree to that use first. [Needs legal review.]
Who helps us (subprocessors)
| Subprocessor | Purpose | Data |
|---|---|---|
| Anthropic | AI widget generation | Transcripts, widget prompts |
| Soniox | Speech-to-text (primary) | Live audio |
| AssemblyAI | Speech-to-text (backup) | Live audio |
| Sign-in; Drive export at the user's request | Account profile; exported files | |
| Stripe | Payments | Email, payment details (held by Stripe), purchase amounts |
| Cloudflare | Audio storage (R2), website hosting, bot protection (Turnstile), email routing | Recordings, request metadata |
| Neon | Database (Postgres) | Account, session, transcript and credit records |
| Fly.io | Application hosting | All data in transit through the app |
| Google (Fonts) | Web fonts on this website | Visitor IP address and browser details, sent when a page loads |
| Resend | Transactional email (invites) | Email address, message content |
Changes
We may update this policy and will change the "Last updated" date when we do.