Plain-language summary: Thought Portal is a personal intelligence platform. You give us your thoughts; we process them to give you self-insights. We protect your raw data. We may use aggregated, non-identifiable behavioural and pattern data for business purposes, including sharing with partners or successors. Your raw text is never sold or shared with third parties without your consent.
Thought Portal is operated by Thought Portal B.V. (or its legal predecessor/successor entity), hereinafter referred to as "Thought Portal", "we", "us", or "our". We are the data controller for all personal data processed under this policy.
For questions about this policy or your data, contact us at privacy@thoughtportal.app.
We collect data that you provide directly and data that is generated automatically through your use of the platform.
| Category | Examples | Legal basis |
|---|---|---|
| Account data | Email address, password (hashed), display name | Contract performance (Art. 6(1)(b) GDPR) |
| Thought content | Text entries submitted via app or Telegram bot | Contract performance; Consent (Art. 6(1)(a)) |
| Billing data | Payment method (tokenised), subscription status | Contract performance; Legal obligation |
| Communication data | Support messages, feedback submissions | Legitimate interest (Art. 6(1)(f)) |
| Category | Examples | Legal basis |
|---|---|---|
| Scored metadata | Valence score, agency score, activation score, MPS (Mental Power Score) | Contract performance |
| Semantic vectors | 1536-dimensional embedding representation of thought content | Contract performance |
| Behavioural patterns | Submission frequency, time-of-day patterns, theme clusters, synapse connections | Legitimate interest |
| Technical data | IP address, device type, browser, session data, error logs | Legitimate interest |
We use your data to operate and improve the platform. Specifically:
We process your data to generate aggregated, statistical, and anonymised derivatives — information that cannot be reasonably used to identify you. These may include:
Anonymised and aggregated data is not personal data under GDPR. We may use, licence, share, monetise, and otherwise exploit such data for any lawful business purpose — including commercial partnerships, platform development, research, and business transactions — without restriction and without further notice to you. Your raw thought content and personal identifiers are never included in such data.
We maintain strict technical and organisational safeguards to ensure that anonymisation is robust and irreversible before any data is used for these purposes.
We do not sell your personal data. We share personal data only in the following circumstances:
We use trusted third-party sub-processors to operate the platform. All are bound by data processing agreements ensuring GDPR compliance:
If Thought Portal is involved in a merger, acquisition, investment round, asset sale, or other corporate transaction, your data — including personal data — may be transferred to the relevant third party as part of that transaction. We will notify you via email and/or a prominent notice on the platform prior to your personal data becoming subject to a different privacy policy. You may request deletion of your data before any such transfer takes effect.
As described in Section 4, we may share aggregated and anonymised data with third parties — including commercial partners, investors, and research collaborators — at our discretion. No personal data is included in such transfers.
We may disclose personal data if required by law, court order, or regulatory authority, or if necessary to protect the rights, property, or safety of Thought Portal, its users, or the public.
We may share data in other ways with your explicit prior consent.
We retain your personal data for as long as your account is active or as necessary to provide services. Specifically:
If you are in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@thoughtportal.app. We will respond within 30 days. We may ask you to verify your identity before processing your request.
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl if you believe we are not processing your data lawfully.
We use strictly necessary cookies to enable core platform functionality (authentication sessions). We do not use third-party advertising cookies or cross-site tracking cookies.
We may use analytics tools to collect anonymised usage data (e.g. page views, feature usage) for the purpose of product improvement. Where required by law, we will obtain your consent before setting non-essential cookies.
We apply industry-standard technical and organisational security measures to protect your data, including:
No method of electronic transmission or storage is 100% secure. In the event of a personal data breach, we will notify affected users and relevant supervisory authorities as required under GDPR (within 72 hours where applicable).
Thought Portal is not directed at children under 16 years of age. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by email or by posting a notice on the platform at least 14 days before the changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.
The version number and date at the top of this page always reflect the current version.
For any questions, requests, or concerns about this policy or our data practices, contact our privacy team:
We're committed to transparency. Reach out and we'll respond within 2 business days.
privacy@thoughtportal.app →