Privacy
Privacy policy
What we collect
Your email address and name, to sign you in and address you. The documents you send, upload or import, and everything derived from them: titles, facts, the people and things they mention, dates. Sign-in and activity records in the audit log, including IP address and browser, encrypted. Payment details are handled by Stripe and never touch our servers.
What we do with it
We read your documents to file them, extract facts and dates, and answer your questions. That is the service. We do not sell data, share it with advertisers, or use your documents to train anything.
Who else sees it
Thaw's AI reads documents through a model provider, Anthropic, over its API. API inputs are not used to train models; Anthropic's standard retention is 30 days. Infrastructure runs on Amazon Web Services in the United States (us-east-2). Email is sent through Postmark, with Amazon SES as the fallback. Cloudflare sits in front of the application. People you invite to a family or business see what you grant them, and every access is in the audit log. When you connect your own assistant (Claude, ChatGPT or another app) from Settings, its provider receives what it asks Thaw for, and only that; the identifying numbers on your documents are included only when you allow it to make changes. Disconnect it and it receives nothing more.
How it is protected
Per-document and per-account encryption with the master key in a separate key service (AWS KMS); identifying numbers encrypted with a blind index and blanked from the search index; tenant isolation enforced by the database; passkey sign-in; an append-only audit log. The security page has the full description.
Getting it out
Export your originals as a folder tree with your facts alongside, at any time, on any plan.
Deleting
Deleting a document destroys its encryption key immediately. Deleting an account destroys the account key at once, and everything in it, backups included, is deleted within 24 hours. Cancelling a paid plan moves the account to Free and deletes nothing; an account with more documents than the free plan holds stays on a paid plan until it is trimmed or deleted.