Privacy Policy

Exothink is operated by [full legal name of person or organisation] (the data controller). You can contact us at [privacy contact email] or [correspondence address].

Exothink helps you explore a conflict by naming the two actions pulling against each other, the needs behind them, an ultimate goal, the assumptions (hidden beliefs) keeping you stuck, and possible solutions.

You don't need an account to work through a decision or save your progress. When you start, we create a saved session containing what you type: the problem, the two actions, the needs, the ultimate goal, assumptions, solutions, your chosen solution and any next action, plus your current step and the dates it was created and updated.

Your browser keeps a list of your session identifiers so it can show your session history. Anyone using the same browser profile may be able to reopen these decisions, so take care on shared devices.

Clearing your browser storage removes your way back to anonymous decisions but does not delete them from our storage. Delete them in Exothink first if you want them gone.

Each anonymous session has its own random secret, created in your browser and kept only there. We store a one-way fingerprint (hash) of it, never the secret itself, so a session identifier on its own can't open your decision.

Secrets are not placed in web addresses, and we design our logs and error reports to exclude them. If you sign in, your browser's decisions move to your account and their old secrets stop working.

Accounts are optional. If you create one with email and password, we store your email address and a securely hashed password. If you sign in with Google, we receive your name, email address and profile details that Google shares.

When you're signed in, your saved decisions are linked to your account so you can reach them on any device. We also keep a record of your AI usage (number of requests, amount of text processed and its cost) to apply fair-use limits and our spending cap.

If you create a read-only share link, anyone who has the link can see that decision's problem, the two options, the needs, the ultimate goal, the assumptions and your chosen solution and first step — never your action plan, check-ins, notes or account details. We store only a one-way fingerprint of the link. You can stop sharing or make a new link at any time, and deleting the decision switches the link off.

If you buy Exothink Pro, payment is handled by Stripe. Your card details go straight to Stripe and never reach Exothink. For Pro purchases Stripe also handles tax, fraud checks, disputes and receipts, so some payment details are processed by Stripe under its own privacy policy (stripe.com/privacy). We keep only your Stripe customer and subscription references, your plan (monthly or yearly), its status, renewal or end date and whether it's set to cancel, so we can give you the right plan. Bank statements may show LINK.COM* alongside our name. [Confirm Stripe's role and data-transfer terms before publication.]

If you join the Pro waitlist, we store the email address you give us and a one-way scrambled version of your network address (to stop abuse). We use the email only to tell you about Pro, and you can ask us to remove it at any time.

If you contact support, send feedback or make a consultancy enquiry, we store what you send (such as your name, email, message, an optional screenshot and, for enquiries, your organisation details and contact preference), a reference number and a one-way scrambled version of your network address (to stop abuse). If you link a saved decision, we keep only its reference, never your answers. We use this only to handle your request. Feedback ratings on help articles are anonymous. [Confirm retention period for support records, e.g. 24 months after closure.]

Our hosting and service providers process technical information such as IP address, request times and browser details to run the service and protect it from misuse. We use your IP address to apply usage limits, including the free AI suggestions available without an account.

If your browser sends us a security report (for example, when it blocks an unexpected script), we keep a trimmed copy without page addresses' query details for up to 30 days.

[Confirm any cookies, analytics or other technologies in use on the published site and the retention of technical logs.]

Without an account you can try 3 AI suggestions for a saved decision (Fast track needs an account). Before each of those, Cloudflare Turnstile checks that you're human; it processes technical signals from your browser and device to do so. When you ask for a suggestion, the relevant parts of your decision are sent through the Lovable AI Gateway to the configured AI model provider. Fast track sends your problem description; other steps send the details that step needs.

The AI model can't access your account, other decisions or our database. Its suggestions are checked before you see them and are always yours to edit or ignore.

We request that providers don't store responses. [Confirm provider retention, training use and processing locations before publication.]

• To provide the guided and Fast track experiences and save your progress.
• To generate AI suggestions you ask for.
• To apply usage limits, protect the service and investigate faults.
• To respond to you and meet legal obligations.

Where UK or EU data protection law applies, we rely on [confirm legal bases: performance of a contract to provide the service you request; legitimate interests for proportionate security and support; legal obligation where applicable].

You can delete a past decision from Session history, or clear the decision you're working on with Start over · Clear answers. Starting a new decision keeps earlier ones.

Signed-in users can download all their data (JSON) or permanently delete their account from Settings. Deleting an account cancels any Pro subscription straight away (so you aren't charged again) and removes its saved decisions, share links, plan, subscription record, Pro waitlist entry, support requests, feedback and consultancy enquiries, and the sign-in account itself. Stripe keeps its own payment records as the law requires. Limited security and AI-usage records are kept for abuse prevention and budget accounting with the account identifier removed; they hold no decision content. [Confirm retention periods for these records.]

Deleted decisions are removed from active storage straight away. Backups and provider logs follow their own schedules. [Insert retention periods for inactive anonymous sessions, accounts, AI usage records and backups.]

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to restrict or object to its use; and to withdraw consent.

You can edit and delete decisions yourself in Exothink. For anything else, contact [privacy contact email]. We may need to verify your request and will reply within the time the law requires.

You can also complain to your data protection regulator — in the UK, the Information Commissioner's Office (ico.org.uk). [Confirm the applicable regulator.]

Our providers may process information outside your country. [Identify processing locations and the safeguards used for international transfers.]

Exothink is intended for people aged [minimum age] and over. If you believe a child has given us information, please contact us.

We'll update this policy when the service or our practices change, revise the date at the top and give extra notice where the law requires.

Questions? Email [privacy contact email].