Privacy
Privacy policy
What we collect
Your email address and name, to sign you in and address you. The documents you send, upload or import, and everything derived from them: titles, facts, the people and things they mention, dates. Sign-in and activity records in the audit log, including IP address and browser, encrypted. Payment details are handled by Stripe and never touch our servers.
What we do with it
We read your documents to file them, extract facts and dates, and answer your questions. That is the service. We do not sell data, share it with advertisers, or use your documents to train anything.
Who else sees it
Thaw's AI reads documents through a model provider, Anthropic, over its API. API inputs are not used to train models; Anthropic's standard retention is 30 days. Search by meaning uses OpenAI's embeddings service over passages with identifying numbers already blanked; its API inputs are not used for training. Infrastructure runs on Amazon Web Services in the United States (us-east-2). Email is sent through Postmark, with Amazon SES as the fallback. Cloudflare sits in front of the application. Error reports go to Sentry with no document content and no personal details. Sign in with Apple and notifications to iPhones go through Apple; browser notifications go through your browser's own push service. A notification carries a short line and a link, never a document. When you connect a mailbox or a cloud folder (Google, Microsoft or Dropbox), Thaw reads from that account with the permission you granted and writes to it only where you turned on a mirror copy. Thaw's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: what Thaw takes from your Google Drive or Gmail is used only to file, read and answer questions about your documents, is never sold, never used for advertising, and never used to train anything; a person at Thaw sees it only with your permission, for support or security, or where the law requires. People you invite to a family or business see what you grant them, and every access is in the audit log. When you connect your own assistant (Claude, ChatGPT or another app) from Settings, its provider receives what it asks Thaw for, and only that; the identifying numbers on your documents are included only when you allow it to make changes. Disconnect it and it receives nothing more.
How it is protected
Per-document and per-account encryption with the master key in a separate key service (AWS KMS); identifying numbers encrypted with a blind index and blanked from the search index; tenant isolation enforced by the database; passkey sign-in; an append-only audit log. The security page has the full description.
Getting it out
Export your originals as a folder tree with your facts alongside, at any time, on any plan.
Deleting
Deleting a document destroys its encryption key immediately. Deleting an account destroys the account key at once, and everything in it is deleted within 24 hours. Backup copies expire on their own: keys within seven days, encrypted files within five weeks. Cancelling a paid plan moves the account to Free and deletes nothing; an account with more documents than the free plan holds stays on a paid plan until it is trimmed or deleted.