Privacy

Last updated 2026-08-09

The short version: we do not train on your content and we never sell it, you can export everything at any time, and this website itself collects almost nothing. The rest of this page covers both — the site you are reading, and the Thoughtstead service you subscribe to.

What this site collects

This marketing and documentation site is static. It has no accounts, no database, and sets no cookies of its own — there is no cookie banner here because there is nothing to consent to.

We use Vercel Analytics to see anonymous, aggregate traffic — things like page views and which country a visit came from. It doesn’t identify you, doesn’t use cookies, and we don’t combine it with anything else about you.

Subscribing

Payment is handled entirely by our payment provider, acting as merchant of record. They process your payment under their own privacy policy — we never see or store your card details. What we receive is your order information: name, email, and subscription status. We use it to run your account, answer support requests, and send billing notices. We do not send marketing you did not ask for.

Your Thoughtstead

Thoughtstead is a hosted service, so what you capture is stored on our infrastructure. That makes the following commitments the important part of this page:

We do not train AI models on your content, and we never sell it.
Every context is isolatedfrom every other customer — and from your own other contexts — at the database level, not merely by application code.
You can export everything, any time— from every context: thoughts, contacts, decisions, invoices, and documents, in readable formats. That includes while you are cancelling.
Delete means delete. Ask us to delete your account and we remove your content from live systems promptly, and from backups as those age out on their normal cycle.
Outbound actions need your approval. Agents draft and queue; they do not send on their own. That is enforced in the database, not by prompt.

To operate the service we necessarily process your content — storing it, indexing it for semantic search, and sending it to our AI provider to enrich and answer questions about it. That processing exists to serve you and for no other purpose.

Staff access

Hosting everything you put in Thoughtstead means our staff could technically read it. We treat that as a serious responsibility: access is limited to what is needed to operate the service or to fix a problem you have asked us to fix, and we would rather ask you than look. We will not pretend this is the same guarantee as data that never leaves your own machine. It is not, and no hosted service can offer that one. What we offer instead is a narrow reason to look, a free export so that leaving is always cheap, and this page saying so plainly.

Connected accounts

If you connect Gmail or Calendar, we store the access tokens Google issues, encrypted, and use them only to sync what you have asked us to sync. Disconnect at any time and we discard them.

Optional diagnostics ping

Thoughtstead includes an opt-in, default-offdiagnostics ping you can enable in settings if you’d like to help us catch regressions across releases. When enabled, it sends only: the app version, a small set of pass/fail booleans from internal health checks, and a randomly generated install ID that isn’t tied to your name or email. It never includes your thoughts, messages, contacts, invoices, or any other content you have put into Thoughtstead. You can turn it off at any time.

Support correspondence

If you email support@bfl.design or privacy@bfl.design, we keep that correspondence for as long as we reasonably need it to help you and to keep a record of support history. We don’t use it for marketing.

Third parties

Running Thoughtstead involves a small number of providers: our payment provider (billing), Vercel (hosting this site and the app, plus anonymous analytics for this site), Supabase (the database your contexts live in), Clerk (sign-in), and our AI provider (embeddings and enrichment). They process data on our instructions in order to deliver the service, and none of them is permitted to use your content for their own purposes.

Changes

If this policy changes in a way that matters, we’ll update this page and the date above.

Contact

Questions about privacy: privacy@bfl.design. Everything else: support@bfl.design.