ThesisLoop is currently operated by Karan Jariwala. References to ThesisLoop, we, us, or our mean Karan Jariwala operating ThesisLoop unless and until the service is transferred or assigned to a registered legal entity.

For privacy questions, deletion requests, access requests, or grievance-related concerns, contact karan@thesisloop.ai.

We collect account information such as your name, email address, authentication provider details, organization or role information, referral information, subscription status, support messages, and consent/audit records.

We collect content you provide or generate in the service, including uploaded documents, selected companies, thesis/report configurations, notes, comments, feedback, prompts, exported content, and analysis results.

We collect technical and usage information such as IP address, user agent, device/browser details, pages visited, actions taken, timestamps, security logs, Turnstile or anti-abuse signals, cookies, and diagnostics.

We may process public market information, company filings, transcripts, investor presentations, websites, and third-party source material to provide research features.

We use information to provide, maintain, secure, and personalize ThesisLoop; authenticate users; run AI analysis; generate cited research outputs; process uploads; provide customer support; prevent abuse; manage subscriptions; and comply with legal obligations.

We use legal acceptance records to document that current Terms of Service and Privacy Policy were presented when you created or accessed an account.

We do not sell your personal data. We do not use your uploaded private documents to train our own general-purpose AI models.

For users who are not Enterprise customers, we may use account data, usage data, uploaded content, prompts, outputs, feedback, and derived analysis to maintain, debug, evaluate, improve, and develop ThesisLoop, including product quality, retrieval, ranking, prompts, safety, reliability, and feature development.

Enterprise usage means use under an ENTERPRISE plan, an Enterprise organization or account, or a written enterprise agreement. Enterprise Customer Content means uploaded documents, prompts, notes, generated reports, analysis outputs, thesis or report configurations, comments, and other customer-provided materials.

We do not use Enterprise Customer Content for platform improvement, model training, feature development, benchmarking, or analytics beyond providing and supporting that Enterprise customer's service, unless the Enterprise customer expressly permits it in writing.

We may still process Enterprise Customer Content and operational telemetry as needed for service delivery, security, reliability, debugging, support, billing, legal compliance, abuse prevention, and customer-requested troubleshooting.

To provide the service, we may send relevant text, document excerpts, metadata, prompts, and outputs to AI model providers, search providers, cloud infrastructure, storage, database, email, authentication, analytics, payment, security, and monitoring providers.

These providers process data for service delivery, security, support, and operational purposes. Their systems may be located in India or other jurisdictions, subject to applicable law and contractual or platform safeguards.

AI providers and infrastructure providers may have independent security, retention, and abuse-monitoring practices. We configure providers where reasonably available to avoid training on customer-uploaded private documents.

We use cookies and similar technologies for authentication, session management, security, abuse prevention, referral tracking, legal acceptance audit flows, and product functionality.

If you sign in with Google or another provider, that provider may share basic account information such as your email, name, and profile image according to its own terms and privacy policy.

We retain account data, uploaded content, analysis outputs, and operational records for as long as needed to provide the service, comply with law, resolve disputes, enforce agreements, maintain security, and keep audit records.

If you delete your account or request deletion, we will delete or de-identify eligible data within a reasonable period, subject to backups, legal obligations, payment records, fraud prevention, security logs, and records we need to establish or defend legal claims.

Legal acceptance records may be retained even after account deletion where necessary to document agreement to the Terms of Service and Privacy Policy.

Subject to applicable law, you may request access, correction, deletion, withdrawal of consent, or information about how your personal data is processed by contacting karan@thesisloop.ai.

Withdrawal or deletion may limit or prevent use of ThesisLoop where the relevant data is required for authentication, security, billing, legal compliance, or service delivery.

You may also raise a grievance using karan@thesisloop.ai. We may need to verify your identity before acting on a request.

We use reasonable technical and organizational safeguards designed to protect personal data, including encrypted transport, access controls, cloud security controls, logs, and monitoring. No system can be guaranteed completely secure.

If we become aware of a personal data breach that requires notification under applicable law, we will take steps required by law and provide relevant information through appropriate channels.

ThesisLoop is not intended for children. Do not use ThesisLoop if you are not legally capable of entering into these terms or if your use would require parental consent that has not been obtained.

We may update this Privacy Policy from time to time. Material changes may be notified by email, in-app notice, or by updating this page. Continued use after an update means you accept the updated policy.

For privacy-related inquiries, contact karan@thesisloop.ai.