Privacy Policy

Thinkora (“we”, “us”, “our”) provides an AI operating analyst for medspas, plastic surgery, dermatology and dental practices. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our website, desktop application and related services (together, the “Service”).

We collect a limited set of information, organized as follows:

• Account information — name, email and organization details you provide when signing up, managed through our authentication provider.
• Usage data — how you interact with the Service, such as features used and questions asked, to improve the product.
• Business data — the results of analyses run against the systems you connect (booking, POS, ads, ERP), scoped to your organization.
• Technical data — device, browser and log information needed for security, diagnostics and reliability.

Critically, your connected-system credentials are stored locally on your device and are not transmitted to or stored by us.

We use the information we collect to:

• Provide, maintain and improve the Service.
• Answer your questions and generate insights, reports and alerts.
• Secure our systems and detect, prevent and respond to abuse.
• Communicate with you about updates, support and service notices.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your business data to train models for other customers.

We share information only as needed to operate the Service, and never for sale. Categories of recipients include:

• Service providers — infrastructure (AWS), authentication and analytics partners who process data on our behalf under contract.
• Legal & safety — when required by law or to protect the rights and safety of users and the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, with notice where required.

We protect your data with encryption in transit (TLS) and at rest (AES-256), least-privilege access controls, per-organization isolation, and secrets stored in a dedicated secrets manager. No method of transmission or storage is perfectly secure, but we work continuously to protect your information. Learn more on our Security page.

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymize it. You can request deletion of your account data at any time.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise any of these rights, contact us at support@thinkora.ai. EU/UK residents can find more detail on our GDPR page.

We use essential cookies to operate the Service and privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings. Disabling some cookies may affect functionality.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we’ll update the “last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance.

Questions about this policy or your data? Reach us anytime at support@thinkora.ai.