ThinTrix Privacy Policy
Effective date: 2026-10-09

Who operates ThinTrix
THINTRIX PTY LTD operates the ThinTrix app. Contact us about privacy, access, correction or deletion at supportapac@thintrix.com.

Information you provide
We process your account identifier and password verification data; recordings that you choose to upload; their titles, transcripts, summaries and mind maps; and your questions and conversation context when you use AI features. If you link a strata management account, we process the session and company information needed to display the records your organisation authorises you to access. Linking is optional and separate from your App account. Company workflows can include the case, quotation, invoice or job-report information you submit, onsite contact names and phone numbers, payment instructions or bank details, and supporting documents or images you choose to attach. Your company controls access to those business records.

Audio and permissions
Microphone access is used for recording you start. Recordings can be made and kept locally without uploading for AI processing. File import and incoming shares only process the files you select. Enabled recording-card features may use Bluetooth, nearby Wi-Fi and local-network access to connect and transfer audio. Notification permission and a push token are used for recording-result alerts when enabled.

Account emails and recovery
You may add and verify a recovery email using your current password. Resetting a password requires a code sent to a previously verified recovery email, and revokes old App sessions. Codes expire after 10 minutes, allow at most five failed attempts, and cannot be reused. The service stores a code hash and an encrypted delivery copy; delivery copies are removed after sending or expiry, and short-lived request records expire within one hour. Account verification and recovery emails are unavailable until a transactional email processor is configured.

AI processing and third-party recipients
Audio, transcripts, questions and the context necessary to answer them can be sent to the following configured processors: Deepgram, audio transcription using api.deepgram.com (global endpoint; processing is not guaranteed to remain in Australia); DeepSeek, transcripts, summaries, mind maps and AI questions using api.deepseek.com through the ThinTrix self-hosted New API gateway (its public privacy policy describes storage in China); ThinTrix services hosted on Tencent Cloud in Silicon Valley, United States, including backend storage, the self-hosted AI gateway, knowledge services and local transcription fallback. Audio is used for speech recognition; text is used for summaries, mind maps and AI answers. Before you send this information, ThinTrix asks for your permission and shows the recipients. You can cancel and continue using local recording. Do not upload recordings without the necessary authority and permission from the people involved. Processor retention and training terms: Deepgram: ThinTrix sends mip_opt_out=true for transcription. Deepgram states that opted-out audio and transcripts are retained only for request processing and excluded from model improvement; request metadata is retrievable for 90 days and summarised usage may be kept longer. See https://developers.deepgram.com/trust-security/your-data . DeepSeek: its public privacy policy describes retention for service, legal and other stated purposes, and use for model improvement. We have not verified an account-specific training opt-out or fixed retention period, and do not promise zero retention or exclusion from training. See https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html . Copies held by processors are subject to their applicable policies and agreements; contact supportapac@thintrix.com for assistance with processor-related requests.

How we use information
We use the information to authenticate you, store and process recordings you request, provide company-authorised workspace features, deliver results, and maintain security and service reliability. Operational AI usage records may include account identifiers and request references. If you report an AI answer, the selected question, answer, reason and your company account identifiers are saved in a restricted safety review queue; pending reports older than 90 days are removed when the queue is next used. Reports are not automatically sent back to an AI model. Cloud AI content can be inaccurate; review it before relying on it or carrying out business actions.

Storage and retention
Local recordings stay on the device until you remove them or uninstall the app. Uploaded personal recordings and results stay in your account until deletion. Company records are controlled separately by your organisation. Deleting your App account removes personal recordings, processing files, results, notification tokens, account credentials and associated personal AI usage records from active service storage. Remaining processing operations cannot restore deleted records. Minimal one-way technical suppression markers are retained to prevent that restoration; they contain no recording content, password or username. Backups use a 30-day retention window; expired copies are removed by the next daily cleanup, which can take up to one additional day. Backups are not used to restore a deleted account to active service. Third-party copies follow the processor terms above.

Your choices and rights
You can use local recording without signing in, decline an upload, unlink a strata management account, and manage permissions in your device settings. Delete your App account from Account > Delete account, or use our account-deletion web page without installing the app. The current password verifies ownership. Company business records and files you exported or shared to other services are not deleted with your personal App account. Contact supportapac@thintrix.com for access, correction, privacy complaints, or deletion assistance if you cannot sign in.

Security, international processing and children
We use HTTPS for service requests, password hashing and protected device credential storage. No service can guarantee absolute security. The listed processors may process information in other countries; use the processor descriptions and contact us for details relevant to your organisation. ThinTrix is intended for workplace and personal productivity and is not directed to children.

Changes
We publish policy updates here. A material change to AI sharing requires a new confirmation before the app submits data under the changed version.