Privacy Policy

Last updated: June 05, 2026

1. Who we are

Thesis ("we") is operated by Lawford Limited Holdings LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. For privacy questions, contact hello@thesistrader.co.

2. What we collect

  • Account data: your email address and authentication details (managed via our auth provider, Supabase).
  • Usage data: the theses you submit and the analyses generated, your subscription status, and basic usage counts.
  • Payment data: handled by Stripe. We do not store your full card details; Stripe processes payments and we receive limited information (e.g. subscription status, customer ID).
  • Technical data: standard logs and, if applicable, analytics.

3. How we use it

To provide and operate the Service, process payments, enforce usage limits, save your theses (for Pro users), communicate with you about your account, and improve the Service.

4. Legal basis (for EU/EEA users, GDPR)

We process data to perform our contract with you (providing the Service), for legitimate interests (operating and improving the Service), and with your consent where required.

5. Sharing

We share data only with service providers that help us operate: Supabase (database and auth), Stripe (payments), Vercel, and the AI provider (Anthropic) that generates analyses. We do not sell your personal data.

6. Data retention

We keep your data while your account is active. When you delete your account, we delete your personal data and associated content (subject to any legal retention obligations).

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to or restrict processing. You can delete your account and data at any time from your account settings, or contact us at hello@thesistrader.co.

8. Security

We use reasonable technical measures to protect your data, including row-level security on our database and encryption in transit. No system is perfectly secure.

9. International transfers

Your data may be processed outside your country (e.g. by US-based providers). Where required, we rely on appropriate safeguards for such transfers.

10. Changes

We may update this policy and will post the new date above.

11. Contact

hello@thesistrader.co