ThinkForge Privacy Policy
Last Updated: May 12, 2026
This policy covers two separate products:
ThinkForge Desktop — a one-time-purchase desktop application ThinkForge Chat — a free Chrome extension
Both are designed to keep your work on your device. We don't sell your data, and we don't train on it.
1. The Big Picture
Local-first. Your projects, mind maps, conversations, folders, and content live on your device. ThinkForge Desktop does not sync. The Chrome extension stores its data in your browser.
BYOK (Bring Your Own Key). When you use AI features, your prompts go directly from your device to the AI provider you chose, using your own API key. We don't sit in the middle, and we don't see your prompts or responses.
Account is for licensing and unlocks only. A ThinkForge account is used to verify your Desktop license and to unlock additional capacity in the Chrome extension. The same account works for both.
We don't sell personal data.
You stay in control. You can export or delete your data and close your account at any time.
2. Who We Are
"ThinkForge," "we," "us," and "our" refers to ThinkForge, the provider of the ThinkForge Desktop app, the ThinkForge Chat Chrome extension, and thinkforge.app.
Contact: [email protected]
3. Information We Collect
A) Account Information
When you create a ThinkForge account (used by both Desktop and the Chrome extension):
• Email address • Password (stored encrypted by our authentication provider, Supabase — we never see your plaintext password)
That's it. No name, no phone number, no profile data.
B) License and Device Check (Desktop only)
ThinkForge Desktop performs a license check approximately once a month to confirm your purchase is valid. This check sends:
• Your license key • A device identifier (used to prevent license sharing across unlimited machines) • Your account email
It does not send your projects, prompts, files, or any content you've created in the app.
C) Extension Sign-In Check
When you're signed into your ThinkForge account on thinkforge.app, the Chrome extension reads your signed-in status to unlock additional indexing capacity. The extension does not transmit your conversations, folders, or content to us.
D) Content You Create
Content you create in either product — projects, folders, conversations, notes, mind maps, templates — stays on your device (Desktop: local files; Extension: Chrome's local storage). We do not receive it, store it, or have access to it.
E) Payment Information (Desktop only)
The one-time purchase of ThinkForge Desktop is processed by Lemon Squeezy, our merchant of record. They handle the payment and tax compliance. We receive a record that you purchased a license, tied to your email. We do not store payment card details.
The Chrome extension is free; no payment information is collected for it.
F) Support Communications
If you email us at [email protected], we receive your email and whatever you've written. We use it to respond to you.
G) What We Do NOT Collect
• We do not collect crash reports or telemetry at this time. • We do not collect usage analytics from inside the apps. • We do not collect the content of your AI prompts or responses. • We do not collect your files, notes, projects, or conversations.
If this ever changes, we'll update this policy and tell you before it takes effect.
4. How We Use Information
We use the limited information we collect to:
• Verify your Desktop license is valid • Unlock features in the Chrome extension when you're signed in • Process your purchase (via Lemon Squeezy) • Respond to support requests • Prevent abuse (e.g., license sharing across many devices)
We do not use your information for advertising, profiling, or AI training.
5. AI Features and Third-Party AI Providers (BYOK)
ThinkForge uses a bring-your-own-key model. When you configure an AI provider:
• Your API key is stored locally on your device. • Your prompts and the AI's responses travel directly between your device and the AI provider you chose. • ThinkForge servers are not in that path. We do not see, store, or proxy your prompt content. • The AI provider's handling of that content is governed by their policies and terms, not ours.
Review the privacy policies of any provider you connect:
• OpenAI: https://openai.com/policies • Anthropic: https://www.anthropic.com/legal • Google (Gemini): https://policies.google.com • Microsoft (Copilot): https://privacy.microsoft.com • Perplexity: https://www.perplexity.ai/privacy • xAI (Grok): https://x.ai/legal • OpenRouter: https://openrouter.ai/privacy • Mistral AI: https://mistral.ai/terms
6. Sharing and Disclosure
We share data only in these situations:
• With service providers that help us operate ThinkForge (see Section 7) • If required by law or valid legal process • To protect safety, prevent fraud or abuse, or enforce our terms
We do not sell your personal information.
7. Subprocessors
• Supabase — account authentication and license storage: https://supabase.com/privacy • Lemon Squeezy — payment processing and merchant of record (Desktop purchases only): https://www.lemonsqueezy.com/privacy
If you'd like a current list of subprocessors, email [email protected].
8. Data Security
We use standard security practices, including:
• TLS encryption for data in transit • Encrypted password storage via Supabase • Access controls on the small amount of account data we hold
Because most of your work never leaves your device, the surface area of "data we hold about you" is intentionally small. No system is 100% secure, but we work to protect what we do have.
9. Data Retention and Deletion
• While your account is active, we retain your account record (email, encrypted password, license). • When you delete your account, we delete the associated personal data within 30 days. Backups are purged within 90 days. • Lemon Squeezy retains purchase records as required for tax and accounting compliance, separate from our systems. • Content on your device stays on your device until you delete it. Uninstalling the app does not automatically remove your local files; you can delete them manually.
10. Your Rights and Controls
Depending on where you live (including under GDPR and CCPA), you may have rights to:
• Access the personal data we hold about you • Correct inaccurate data • Export your data • Delete your account and associated data • Opt out of any marketing communications
To exercise any of these, email [email protected].
Note: Because content lives on your device, you already have direct access, export, and deletion control over the vast majority of your ThinkForge data — you don't need to ask us.
11. Children's Privacy
ThinkForge is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact [email protected] and we will delete it.
12. Changes to This Policy
We may update this policy. When we do, we'll update the "Last Updated" date at the top and post the new version on this page. Material changes will be communicated to account holders by email.