Privacy notice

Last updated: August 18, 2025

1. Introduction

Thinking Machines Lab is an artificial intelligence research and product company. Our Privacy Notice (the "Notice") describes how we collect, use and disclose your information when you access or use our website, applications and services, or otherwise interact with us (collectively, "Services"). For the purpose of this Privacy Notice, Thinking Machines Labs, Inc., is the data controller of your information. By using our Services, you agree to our collection, use, and disclosure of your information described here. If you do not understand or agree with this Privacy Notice, please do not use our Services.

If you have questions about our Privacy Notice or wish to exercise your applicable privacy rights you can contact us at [email protected].

2. Changes to the privacy notice

We may update this Policy Notice from time to time. If we do, we will publish an updated version here with an effective date informing you of the update. If we make material changes to how we use or disclose information, we will use reasonable efforts to notify you in accordance with applicable law.

3. Personal information we collect and how we use it

When you access or use our Services, we collect personal information about you from a variety of sources, as described below. In addition to the specific uses discussed below, we may use this information for our legitimate interest to provide and improve the Services, maintain our business relationship, enhance the safety and security of our Services, provide customer support, comply with applicable legal obligations, enforce any applicable terms of service, prevent fraud, illegal activity and misuse of our Services, and protect our rights and the rights of our employees, users or other third parties.

What you provide us

We receive the following personal information that you provide us.

Communications information: We collect your name, email address, and any other information you might provide when you communicate with, such as via email or social media (e.g., X), because it is in our legitimate interests to communicate with you and be responsive to you.

What we receive automatically

We and third parties collect the following personal information when you use our Services. This includes information collected via cookies or related technologies, which you may configure your browser to disable but which may impact the Services, for example our ability to remember your website preferences. This information is collected and used because it is in our legitimate interests to tailor your experience with the Services, run analytics, and better understand user interaction. Where required, we will obtain your consent prior to using non-essential cookies and related technologies.

Device information: We collect information such as your device type, unique device identifier, and internet protocol (IP) address.
Location information: We may determine the general area from where your device uses our Services based on information like your IP address.
Log data: We collect information that your browser sends to us automatically through your use of our Services, such as your browser type and settings and how you interact with our Services.
Usage data: We collect information about your use of our Services, such as the content you access on our website, your activity on our website.

Your browser may allow you to transmit a "Do Not Track", "opt out preference" signal or other mechanism for exercising choices relating to the collection of your information online. Like many websites, our website is not designed to respond to such signals and we do not use or disclose your personal information in a way that would legally require us to recognize opt-out preference signals like Global Privacy Control.

What we receive from third parties

We may receive personal information from third parties, such as from service providers that help us operate our services including cloud and security. We also collect information that is publicly available on the internet.

4. How we disclose personal information

We may disclose personal information to the following third parties for the reasons listed below:

Vendors or service providers: We may disclose your personal information to third parties who help us provide our Services, including for system administration, cloud storage, security, and web analytics.
Affiliates: We may disclose your personal information to our affiliates and others within our corporate group, as a matter of our legitimate interests to provide our Services and operate our business.
Professional advisors: We may disclose your personal information to auditors, law firms, or accounting firms to comply with our legal and regulatory obligations and in our legitimate interests to assess, protect, enforce and defend our rights and those of our employees and users.
Business transactions: We may disclose your personal information to third parties in connection with or anticipation of an asset sale, merger, bankruptcy, or other business transaction, as a matter of our legitimate interests to run a successful and efficient business.
Government authorities or other related third parties: We may disclose your personal information to government authorities or other related third parties in our legitimate interest to comply with legal requirements, law enforcement or regulatory inquiries, to enforce our terms of service, and to ensure the safety and security of our business, employees, and users.

5. How long we store personal information

We keep personal information for as long as reasonably necessary for the purposes explained in this Privacy Notice. The length of time depends on several factors, including whether we need the personal information to provide our Services, to resolve any disputes, to comply with any contractual or legal obligations, to enforce our contracts, to prevent harm, to promote safety, security, and integrity, or to protect ourselves, including our rights or those of our employees. We also consider the amount and nature of the personal information, as well as the risk of harm if that personal information was lost or stolen.

6. How we protect personal information

We make reasonable efforts to protect your personal information from loss, misuse, or unauthorized access or disclosure but we cannot guarantee "perfect security." We encourage you to take care when disclosing information to us.

7. Your personal information rights

Depending on where you live, your legal rights over your data may include the right to:

Access or know what personal information we have about you and how it is processed;
Delete your personal information that we hold about you;
Update or correct inaccurate personal information that we hold about you
Transfer a copy of your personal information to a third-party;
Restrict, stop, or suspend our processing of your personal information;
Object to our processing of your personal information;
Withdraw your consent to our processing of your personal information, to the extent we rely on consent for such processing.

These rights are not absolute and we may decline your request where permitted by law. You can email us at [email protected] to exercise these rights. We will not discriminate against you for doing so. For your security, we may require you, or any agent acting on behalf, to verify your identity and any agent authorization before exercising these rights. If we deny your request, and where permitted by law, you may appeal our decision by emailing us at [email protected].

8. Children's privacy

Our Services are not intended for or directed at children under the age of 13 and we do not knowingly collect personal information about them. If you believe we have unknowingly done so please email us at [email protected], and we will make commercially reasonable efforts to delete such information.

9. Third parties

We may provide links or integrations with third parties, such as social media websites, in our Services, and you may, at your choice, disclose personal information to those third parties. We are not responsible for the privacy rights or security features of those third parties. We recommend reviewing those third parties' Privacy Notices and contacting those third parties directly with any questions or concerns.

10. Additional U.S. state disclosures

Some U.S. states, such as California, require additional disclosures about what personal information we collect and how we use or disclose it. For purposes of this Section, personal information also includes "sensitive personal information" as defined under the California Consumer Privacy Act ("CCPA").

The table below sets out the categories of personal information that we collect and disclose, and have collected and disclosed over the past 12 months.

Category of personal information	Use of personal information	Disclosure of personal information
We collect the following categories of personal information. Identifiers, such as your name, IP address, and device information Personal information listed in the California Customer Records statute such as name Internet and similar network activity information, such as information about your use of our Services Geolocation data, such as IP address and general location of your device when you access our Services	We use personal information for the following purposes. To communicate with you To provide, analyze, and improve our Services To conduct research To prevent fraud or illegal activity To comply with our legal or contractual obligations To protect the safety and security of our Services, you, any other users, or the public or third parties	We disclose personal information to the following third parties. Service providers, in order to provide our Services Governmental or regulatory bodies to comply with applicable law

For information regarding the specific purposes for which we collect and disclose your information, and the categories of sources from which we collect such information, please see the sections above, "Personal Information We Collect" and "How We Disclose Personal Information". Information about our retention practices is described above in "How Long We Store Personal Information". We only use and disclose sensitive personal information for the purposes specified in the CCPA or otherwise in line with your consent.

We do not "sell" or "share" personal information as those terms are defined in the CCPA nor have we done so in the prior 12 months. Further, we do not have actual knowledge that we sell or share personal information of individuals under 16 years of age.

11. Data transfers

We are based in the United States. If you are using the Services outside the United States, please be aware that the information we collect from you may be transferred to, stored and processed in the United States or other countries outside of your country of residence, which may have data privacy or protection rules that are different from your country of residence.

12. How can you contact us?

Please email us at [email protected] if you have any questions or would like to exercise any of your rights as described herein.