// Legal

Privacy Policy

Effective: November 1, 2026  ·  Last updated: November 1, 2026

At Thimblehub, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how Thimblehub, Inc. (“Thimblehub,” “we,” or “us”) collects, uses, discloses, and safeguards information when you use our website and Services or otherwise interact with us. It also describes your rights and choices regarding your personal information. This policy applies to all users and customers of our Services and website, and it is incorporated into our Terms of Service above. By using Thimblehub's website or Services, you agree to the collection and use of information in accordance with this Privacy Policy.

If you have any questions about this policy or our data practices, please contact us using the information provided at the end of this policy.

Information We Collect

We may collect several types of information from or about you, including:

  • Information You Provide Directly: When you create an account, purchase our Services, or communicate with us, you may provide personal information such as your name, business name, email address, phone number, billing address, and payment details.
  • Account and Transaction Information: In the course of using our Services, you might provide additional information. We also keep records of your purchases, subscription plan, and payment history with Thimblehub.
  • Automatically Collected Information: We (or our third-party partners) use cookies and similar tracking technologies to collect certain information automatically -- your IP address, browser type, device identifiers, pages accessed, dates/times of access, and referral information.
  • Analytics Data: We use third-party analytics services that collect data about use of our website. This information is generally aggregated and does not identify you individually.
  • Information from Third Parties: We may receive information about you from third-party sources, such as identity providers or payment processors.
  • Sensitive Information: Generally, we do not seek to collect sensitive personal information unless necessary for a specific Service. Sensitive data in the Portal is governed by our MSA (which includes a BAA, if applicable).

We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such data, we will take steps to delete it.

How We Use Your Information

We use the information we collect for purposes consistent with providing and improving our Services, as well as for legitimate business and legal reasons:

  • Providing and Maintaining Services: Delivering the Services you requested, processing transactions, authenticating you, and operating our platform.
  • Improving and Developing Services: Analyzing usage data and feedback to fix bugs, optimize user experience, and develop new features.
  • Personalization: Using your preferences and past interactions to customize your experience.
  • Communication: Sending important notices about your account, plus optional marketing communications (you can opt out at any time).
  • Customer Support: Responding to your questions and resolving issues.
  • Security and Fraud Prevention: Monitoring for and preventing fraudulent, abusive, or unlawful activities.
  • Legal Compliance: Using or disclosing your information as necessary to comply with applicable laws.
  • Aggregated Analytics: Creating aggregated or de-identified data for analytical purposes.

How We Share and Disclose Information

Thimblehub does not sell personal information to third parties for monetary consideration. We do share certain information in the following circumstances:

  • Service Providers: Trusted third-party providers who perform services on our behalf.
  • Business Transactions: In a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
  • Legal Requirements and Safety: As required by law or to protect rights and safety.
  • Professional Advisors: With our lawyers, accountants, and other professional advisors.
  • Affiliates: With our corporate affiliates.
  • With Your Consent: When we have your explicit consent to share.

In all cases, we disclose only the minimum amount of personal information necessary for the specific purpose.

Cookies and Tracking Technologies

Thimblehub uses cookies and similar tracking technologies to provide and improve our Services. We use cookies for:

  • Authentication: To recognize you when you log in and keep you logged in.
  • Preferences: To remember your settings and preferences.
  • Analytics: To help us understand user activity on our website.
  • Advertising: Currently, we do not serve third-party ads on our site.

You have choices regarding cookies. Most browsers allow you to decline or clear cookies, but note that some site features may not work properly without them.

Do-Not-Track Signals: Our website does not currently respond to DNT signals because there is no industry-standard approach.

Third-Party Analytics: We use services like Google Analytics. You can opt out via browser add-ons or privacy plug-ins.

Data Security

We take reasonable and appropriate measures to protect the security of your personal information from unauthorized access, alteration, disclosure, or destruction. Thimblehub implements administrative, technical, and physical safeguards designed to protect personal data.

No method of transmission over the Internet is completely secure. In the event of a data breach affecting your personal information, we will act promptly to contain and investigate it, and notify you and applicable regulators as required by law.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Account Data: Kept until you delete the account or after a set period of inactivity.
  • Content on Services: Deleted content may persist in backups or archives for a period.
  • Legal Obligations: Certain records may be retained to comply with legal obligations.
  • Disputes: Relevant information is retained until a dispute is resolved.

Your Rights and Choices

  • Access and Correction: You may access and update certain account information by logging into your Thimblehub account.
  • Deletion: You can request that we delete your personal information.
  • Opt-Out of Marketing: Unsubscribe at any time by clicking the "unsubscribe" link in marketing emails.
  • Do Not Sell (California/CCPA): We do not sell personal information to third parties for monetary value.
  • California Privacy Rights: If you are a California resident, you have specific rights under CCPA/CPRA.
  • GDPR and International Rights: If you are in the EEA, UK, or similar region, you may have rights under GDPR or equivalent laws.

International Data Transfers

Thimblehub is based in the United States, and our website and Services are hosted in the U.S. If you are accessing from outside the U.S., be aware that your information will likely be transferred to, stored, and processed in the United States.

Third-Party Links and Services

Our website or Services may contain links to third-party websites. This Privacy Policy does not apply to information collected on any third-party site or service not controlled by Thimblehub.

Changes to this Privacy Policy

We may update or change this Privacy Policy from time to time. If we make material changes, we will provide prominent notice. Your continued use of our Services after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or about your personal information, please contact us:

Email: hello@thimblehub.com (include “Privacy Inquiry” in the subject line)

We will respond to your inquiries as soon as reasonably possible, generally within 30 days.