Privacy Policy

Thorbit AI LLC

Effective: January 23, 2026

Thorbit AI is a content intelligence and SEO platform that helps businesses build topical authority through AI-powered content analysis, entity mapping, and strategic content planning.

This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website at thorbit.ai and our content intelligence platform ("Services").

This Privacy Policy does not apply where Thorbit AI acts as a data processor and processes personal data on behalf of commercial customers—for example, when analyzing your website content or competitor data on your behalf. In those cases, you as the customer are the controller of that data.

This Privacy Policy also describes your privacy rights. More information about your rights, and how to exercise them, is set out in Section 4 ("Rights and Choices").

1. Collection of Personal Data

We collect the following categories of personal data:

Personal data you provide to us directly

Identity and Contact Data: We collect identifiers, including your name, email address, and phone number when you sign up for a Thorbit AI account or subscribe to our Services. We may also collect or generate indirect identifiers (e.g., user IDs).

Payment Information: We collect your payment information if you choose to purchase access to Thorbit AI's products and services. Payment processing is handled by our third-party payment processor, Stripe.

Project and Content Data: You may provide us with website URLs, content, and other materials for analysis through our Services. This includes:

• Website URLs and content you submit for analysis
• Competitor domains you wish to analyze
• Content briefs, articles, and strategic documents generated through our platform
• Entity and keyword data related to your projects

Feedback: We appreciate feedback, including ideas and suggestions for improvement. If you provide feedback about our Services, we will store this information to improve our platform.

Communication Information: If you communicate with us, we collect your name, contact information, and the contents of any messages you send.

Personal data we receive automatically from your use of the Services

When you use the Services, we receive certain technical data automatically:

Device and Connection Information: Your device or browser automatically sends us information including device type, operating system, browser information, IP address, time zone, and device identifiers.

Usage Information: We collect information about your use of the Services, such as dates and times of access, features used, pages viewed, and other information about how you interact with our platform.

Log and Troubleshooting Information: We collect log files and error information to maintain and improve our Services.

Cookies and Similar Technologies: We use cookies and similar technologies to manage the Services and collect information about you and your use of the Services. For more details, please see the "Cookies and Tracking Technologies" section of this Privacy Policy.

Identity Resolution Data: We may use third-party services to identify visitors to our website and associate browsing activity with business contact information, including name, email address, company name, and job title.

2. Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies to operate and improve our Services, analyze usage, and support our marketing efforts.

Types of technologies we use:

Essential cookies: Required for basic site functionality, security, and authentication. These cannot be disabled.

Analytics and performance: We use tools such as Google Analytics, Microsoft Clarity, Hotjar, and similar services to understand how visitors interact with our Services. These tools may collect information including pages visited, time on site, click patterns, scroll depth, and session recordings.

Marketing and advertising: We use advertising pixels, conversion tracking, and remarketing technologies from platforms including Google, Meta, LinkedIn, and other advertising networks. These technologies help us measure ad effectiveness and deliver relevant advertising.

Identity resolution: We use identity resolution and visitor identification technologies that may associate your browsing activity with business contact information obtained from third-party data providers. This allows us to identify potential business prospects who visit our site, even if they have not submitted a form or created an account. Information collected may include your name, email address, company, job title, and browsing behavior on our site.

Geographic Scope of Identity Resolution: Our identity resolution technologies are designed to identify business visitors located in the United States only. For visitors located in the European Economic Area (EEA), United Kingdom, Switzerland, or other jurisdictions where such technologies require prior consent, these identification technologies are either not deployed or are only activated after obtaining appropriate consent through our cookie consent mechanism.

Third-party tracking: Our Services may include tracking technologies operated by third parties. These third parties may collect information about your online activities over time and across different websites. We do not control these third parties' tracking technologies or how they use the information collected.

Consent for EEA/UK Visitors: If you are located in the EEA, UK, or Switzerland, we will only place non-essential cookies and tracking technologies on your device after obtaining your consent through our cookie consent mechanism, except where another legal basis applies under applicable law. You may withdraw your consent at any time through our cookie settings.

Cookie Consent Mechanism: Where required by applicable law, we obtain your consent before placing non-essential cookies on your device. You can manage your cookie preferences at any time through our cookie settings, accessible via the cookie banner on our website or by contacting us at support@thorbit.ai.

Your choices: Most web browsers allow you to control cookies through settings. You can set your browser to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect the functionality of our Services. For targeted advertising opt-outs, you may visit the Network Advertising Initiative (optout.networkadvertising.org) or Digital Advertising Alliance (optout.aboutads.info).

We reserve the right to add, modify, or replace any tracking or analytics technologies at any time without prior notice, provided such use is disclosed in this Privacy Policy.

3. Uses of Personal Data

We use your personal data for the following purposes:

• To provide, maintain, and facilitate any products and services offered through your Thorbit AI account
• To perform content analysis, topical authority scoring, and other analytical services you request
• To communicate with you, including sending you information about our Services, updates, and support
• To create and administer your Thorbit AI account
• To facilitate payments for products and services
• To prevent and investigate fraud, abuse, and violations of our Terms of Service
• To investigate and resolve disputes and security issues
• To debug and identify and repair errors
• To improve the Services and conduct research
• To enforce our Terms of Service, including our Acceptable Use Policy
• To send you marketing communications, including information about our products, services, and promotional offers
• To serve targeted advertising and measure the effectiveness of our marketing campaigns
• To identify and contact prospective customers through identity resolution technologies
• To make automated decisions regarding your account, access to features, pricing, or eligibility for services, which may be based in whole or in part on automated processing of your personal data

Marketing Communications

We may send you marketing communications about our products, services, features, and promotional offers. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at support@thorbit.ai. Please note that even if you opt out of marketing communications, we may still send you transactional messages related to your account, purchases, or use of our Services.

4. How We Disclose Personal Data

Thorbit AI will disclose personal data to the following categories of third parties:

Service Providers and Business Partners: We may disclose personal data to service providers and business partners who assist us in operating our Services and conducting our business. These include:

• Infrastructure and hosting: MongoDB Atlas (database hosting)
• Authentication: Clerk
• Payment processing: Stripe
• AI processing: OpenRouter, Anthropic, and other AI service providers
• Data collection: Firecrawl (web scraping)
• Analytics and performance: Google Analytics, Google Search Console, Microsoft Clarity, Hotjar, and other analytics providers
• Marketing and advertising: Advertising platforms, identity resolution providers, email marketing services, and customer relationship management systems
• Email and communications: Email service providers for transactional and marketing communications

We may engage additional service providers and business partners from time to time. This list is not exhaustive, and we reserve the right to use additional providers without updating this list, provided such use is consistent with this Privacy Policy.

As Required by Law: We may disclose personal data to governmental authorities as required by law, in response to legal requests, or to protect our rights and the rights of others.

Corporate Transactions: If Thorbit AI is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.

With Your Consent: We will disclose personal data when you give us permission or direct us to do so.

5. Rights and Choices

Depending on where you live and the laws that apply, you may have certain rights regarding your personal data:

• Right to Know: The right to know what personal data we process about you.
• Access and Data Portability: The right to request a copy of the personal data we process about you.
• Deletion: The right to request that we delete personal data collected from you. You can also delete individual projects and analyses from your account.
• Correction: The right to request that we correct inaccurate personal data.
• Objection: The right to object to processing of your personal data in certain circumstances.
• Withdrawal of Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

To exercise your rights, please contact us at support@thorbit.ai. We will respond to your request in accordance with applicable law.

6. Data Transfers

When you access our Services, your personal data may be transferred to servers in the United States or other countries. We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses where required.

7. Data Retention and Security

Data Retention

Thorbit AI retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, maintain our business operations, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods vary based on the type of data and our business needs. We may retain certain data indefinitely for legitimate business purposes, including maintaining business records, improving our Services, and complying with legal requirements. Account data is retained while your account is active and for a period thereafter as necessary for the purposes stated above. Payment records are retained as required for tax, accounting, and legal compliance. Technical logs and usage data may be retained for security, analytics, and service improvement purposes.

When personal data is no longer needed, we will delete it or anonymize it in accordance with our data retention practices.

Security Controls

We implement appropriate technical and organizational security measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for stored data
• Access controls and authentication via Clerk
• Regular security assessments

Data Breach Notification

In the event of a data breach affecting your personal data, we will notify you and relevant regulatory authorities as required by applicable law. We will provide information about the nature of the breach, the types of data affected, and steps you can take to protect yourself. Nothing in this Privacy Policy limits any rights or remedies available to you under applicable law, nor does it create any liability for Thorbit AI beyond what is required by applicable law.

8. Children

Our Services are not directed towards, and we do not knowingly collect information from, children under the age of 18. If you become aware that a child has provided personal data to us, please contact us at support@thorbit.ai.

9. Third-Party Websites and Services

Our Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to Our Privacy Policy

Thorbit AI may update this Privacy Policy from time to time. We will notify you of any material changes and update the Effective Date at the top of this page.

11. Contact Information

If you have any questions about this Privacy Policy, or have any questions, complaints, or requests regarding your personal data, you can contact us:

Thorbit AI LLC
30 N Gould St Ste R
Sheridan, WY 82801

Phone: +1 (478) 309-6262
Email: support@thorbit.ai

12. Legal Bases for Processing (EEA/UK Users)

13. Supplemental Disclosures for Residents of California

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal data we have collected about you.
• Right to Delete: You can request deletion of your personal data, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt-out of the sale of your personal data. Thorbit AI does not sell personal data.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, please contact us at support@thorbit.ai.

Do Not Track Disclosure

Our Services do not currently respond to "Do Not Track" browser signals or similar mechanisms. We may continue to collect information about your browsing activity as described in this Privacy Policy regardless of any Do Not Track settings in your browser.

California Shine the Light (Civil Code Section 1798.83)

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes. If you have questions, contact us at support@thorbit.ai.

14. Supplemental Disclosures for Residents of the European Economic Area (EEA) and UK

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to lodge a complaint with a supervisory authority
• The right to data portability
• The right to restrict processing

For EEA/UK users, the data controller is Thorbit AI LLC. For questions about data protection, contact us at support@thorbit.ai.

EU/UK Representative

If you are located in the EEA or UK and wish to contact a representative within your jurisdiction regarding data protection matters, please contact us at support@thorbit.ai and we will provide you with the details of our appointed representative or make arrangements to appoint one upon request.

Data Processing Agreement

For enterprise customers who require a Data Processing Agreement (DPA) to comply with GDPR or other data protection laws, a DPA is available upon request. Please contact support@thorbit.ai to request a DPA.

Sub-Processors

We use sub-processors to help provide our Services. A list of our current sub-processors is available in Section 4 of this Privacy Policy. We will update this list when we engage new sub-processors or replace existing ones. For enterprise customers with a DPA, we will provide notice of sub-processor changes in accordance with the terms of that agreement.

International Data Transfers

When we transfer personal data from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement or Addendum, as applicable.

Data Subject Access Requests

We will respond to data subject access requests within 30 days of receipt. If we require additional time due to the complexity or number of requests, we will notify you within the initial 30-day period and may extend the response period by up to an additional 60 days.

Automated Decision-Making

We may use automated processing, including profiling, to make decisions that affect your access to features, pricing, account status, or eligibility for services. These automated decisions may be based on information we collect about you, including usage patterns, account history, and other factors. Where required by applicable law, you have the right to request human review of automated decisions that significantly affect you. To exercise this right, contact us at support@thorbit.ai.

Right to Object to Direct Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing. If you object, we will stop processing your personal data for these purposes. To exercise this right, contact us at support@thorbit.ai or use the unsubscribe link in any marketing email. We will process your request without undue delay and at the latest within one month.

Legal Basis Clarification for EU/UK Users

For direct marketing to users in the EEA, UK, and Switzerland, our primary legal basis is your consent. You may withdraw your consent at any time, and we will cease marketing communications to you. For other processing activities, we rely on the legal bases set forth in Section 12 of this Privacy Policy.

15. Other U.S. State Privacy Laws

In addition to California, residents of certain other U.S. states have specific privacy rights under state law.

Virginia, Colorado, and Connecticut Residents

If you are a resident of Virginia (VCDPA), Colorado (CPA), or Connecticut (CTDPA), you may have the following rights:

• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to delete your personal data
• Right to obtain a copy of your personal data in a portable format
• Right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects

We do not sell personal data as defined under these state laws. To exercise your rights, contact us at support@thorbit.ai. You may appeal a decision regarding your request by contacting us at the same address.

Nevada Residents

Nevada residents have the right to opt out of the sale of certain "covered information" as defined under Nevada Revised Statutes Chapter 603A. We do not sell your covered information as defined under Nevada law. If you wish to submit an opt-out request, please contact us at support@thorbit.ai.

16. Sensitive Personal Data

We do not intentionally collect sensitive personal data (also known as "special category data" under GDPR), such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification purposes, health data, or data concerning sex life or sexual orientation. If we become aware that we have inadvertently collected such data, we will take steps to delete it unless we have a legal basis to retain it.

Last updated: January 23, 2026