Privacy Policy
Last Updated: October 2, 2026
Introduction
Thought Source Corp ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Percomb platform.
Information We Collect
Information You Provide
- Account Information: Name, email address, password, company name, and contact details
- Project Data: Documents, files, and content you upload to the platform
- Usage Information: Projects, analyses, and interactions with the platform
Inquiries and Partial Signups
- What you send us: If you fill in a form on our website — the contact form, the pricing calculator, or a request for help inside the product — we keep your name, email address, company and what you wrote, so that we can reply and so that we have a record of the conversation.
- Signups you do not finish: If you begin creating an account and stop part way, we keep the details you had entered by that point. We do this to understand where the signup process is failing people. We will not email you about an abandoned signup. If you would rather we did not keep it at all, write to us and we will delete it.
- Marketing updates: We send product updates to people who have ticked the box asking for them. On the sandbox request form that box is pre-ticked and cannot be cleared, because the sandbox and everything about it arrive by email; you can unsubscribe at any time. Replying to your inquiry is not marketing and does not need that box.
Automatically Collected Information
- Technical Data: IP address, browser type, device information, and operating system
- Usage Data: Which features of the platform are used, and when
- Cookies: Inside the platform we use essential cookies for authentication and session management, plus one first-party cookie that remembers whether your sidebar is open. Nothing is shared with a third party. Our public marketing website may additionally use analytics cookies — where local law requires your consent we ask first, and everywhere else you can opt out in one click (see Analytics below)
Analytics
We measure two different things in two deliberately different ways.
Inside the platform
Feature usage is recorded in our own systems, not sent to any third-party analytics provider. We record which action occurred, the organization and user account that performed it, and identifiers and counts relating to it — for example that a document was indexed, its file type, and how many passages were extracted.
We do not record the content of your material in analytics. Document names, project names, search queries, file contents and generated text are excluded by design and enforced automatically in our codebase. Analytics cookies are not used inside the platform, and no third-party analytics script is loaded there.
Per-event detail is kept for a limited period (90 days by default) and then deleted. Aggregate daily totals, which contain no per-user detail, are retained to understand long-term trends.
On our public website
Our marketing website may use a third-party analytics service to understand which pages help people evaluate the product. What we ask of you depends on where you are visiting from, because the rules do:
- In the EEA, the UK, and other places whose law requires your consent first: nothing is loaded and no request is made to that service until you accept. Declining means no request to that provider is made at all, rather than a request made with tracking disabled.
- Everywhere else: analytics runs when you arrive and we tell you so, with a one-click opt-out on the notice itself and in our footer. Opting out stops any further request immediately.
In both cases we honor browser Do Not Track and Global Privacy Control signals, and we do not enable advertising or cross-device features on any analytics we use.
Cookies and Similar Technologies
We use three kinds of browser storage, and only the third involves a third party.
| What | Where | Purpose | Your choice |
|---|---|---|---|
| Essential and preference cookies | The platform | Signing you in, keeping you signed in, and remembering whether your sidebar is open. Set by us, read by us | Not required |
| Local browser storage | Both | Remembering your interface preferences, and your cookie choice itself. Never transmitted to us | Not required |
| Analytics cookies | Public website only | Understanding which pages help people evaluate the product | Your consent first where local law requires it; otherwise on by default with a one-click opt-out |
Where your consent is required we ask before the site opens, rather than in a strip along the bottom that you could scroll past, because the analytics cookie genuinely does wait for your answer. Declining opens the site in full — the only difference is that we do not measure your visit.
The record of your choice is kept in your browser's local storage rather than in a cookie, so that declining does not itself require setting one. To know which rules apply we look only at the country your network address indicates; we do not store it.
Withdrawing or changing your choice
Use the Cookie preferences link in our website footer at any time to change or withdraw your decision. Withdrawing takes effect immediately and stops any further analytics request. Clearing your browser's site data has the same effect, and we will ask again on your next visit.
How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our services
- Process your transactions and manage your account
- Analyze your uploaded documents on infrastructure we operate
- Send administrative information and service updates
- Respond to your inquiries and provide customer support
- Monitor and analyze usage patterns to improve our platform
- Ensure platform security and prevent fraud
Where Your Material Is Processed
- On infrastructure we operate, by default: This is a hosted service. Your documents are uploaded to us and analyzed on hardware we operate. Nothing runs on your own device or network
- Hosted model providers: Where the platform routes a workload to a hosted model provider under our contract, document-derived text for that workload is sent to that provider. We state which providers are in use, in writing, on request. Your documents are not training data for anyone
- Encryption: Data is encrypted in transit (TLS) and at rest
- Access Controls: Role-based access controls protect your data
- Security review: We review the platform's security on a continuing basis. What we do and do not claim is set out at /security
Information Sharing and Disclosure
We do not sell your personal information. We may share information only:
- With Your Consent: When you explicitly authorize us to share information
- Service Providers: With trusted third-party service providers (e.g., payment processing, email delivery) under strict confidentiality agreements
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
Your Rights
Depending on your location, you may have rights including:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a machine-readable format
- Objection: Object to certain types of data processing
- Withdraw Consent: Withdraw previously given consent
To exercise these rights, contact us at privacy@thoughtsourceconsulting.com
Data Retention
We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information within 30 days, except where required for legal compliance.
Inquiries and partial signups are kept for 24 months from the last time we heard from you, after which the record is deleted. If you have asked us not to contact you, we keep a one-way scrambled copy of your email address and nothing else, so that we can honor that request without keeping your details in order to honor it.
Usage analytics are retained on a shorter and separate schedule. Per-event records, which are linked to a user account, are deleted after a limited period — 90 days by default. Before they are deleted they are aggregated into daily totals that identify no individual, and those totals are retained so that long-term trends survive. Deleting an organization deletes its per-event records and its aggregates together.
International Data Transfers
If you access our services from outside the region where our servers are located, your information may be transferred internationally. We ensure appropriate safeguards are in place for such transfers.
Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from children.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance.
Contact Us
For privacy-related questions or concerns:
- Email: privacy@thoughtsourceconsulting.com
- Address: Thought Source Corp
- Support Portal: Contact Form
Additional Information for Specific Jurisdictions
European Economic Area (EEA) and UK
Under GDPR, our legal basis for processing includes consent, contractual necessity, legal obligations, and legitimate interests.
California Residents
Under CCPA, you have additional rights including the right to know about personal information collection and the right to opt-out of sale (though we do not sell personal information).
Australia
Under the Privacy Act 1988, you have rights to access and correct your personal information held by us.