← Back to Platform
Privacy Policy
Effective: March 28, 2026 · Last Updated: October 30, 2026 · ThinkKits LLC · 151 Discovery Dr Ste 107, Colmar, PA 18915PRIVACY SUMMARY
ThinkKits collects only what it needs to run the platform, protects it with industry-standard security, and never sells it. Our core data, the school and district intelligence you research, is publicly available data from federal sources. This policy explains what we collect about you as a user.What we collect, and what we never do
INDEX
Table of Contents
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
01 · PRIVACY POLICY
ThinkKits LLC ("ThinkKits," "we," "us," or "our") is a Pennsylvania limited liability company operating the ThinkKits education intelligence platform at app.thinkkits.com. We are the data controller for personal information collected through the Platform.Questions about this Privacy Policy may be directed to info@thinkkits.com.Who We Are
02 · PRIVACY POLICY
2.1 Account InformationWhen you create an account, we collect:• Name and email address• Organization name and role (if provided)• Password (stored as a secure hash; we never store plaintext passwords)• Account type and billing statusAccount authentication is handled by Clerk. See Clerk's privacy policy for details on how authentication credentials are stored.2.2 Usage DataWe automatically collect information about how you use the Platform:• Pages visited, features used, searches performed• Timestamps and session duration• IP address and approximate geographic location (country/state level)• Browser type, operating system, and device type• Referring URL2.3 Payment InformationPayment processing is handled entirely by Stripe. ThinkKits does not store credit card numbers, CVVs, or full payment card details. We retain only a Stripe customer ID and the last four digits of your card for billing management purposes.2.4 CommunicationsIf you contact us by email or through the Platform, we retain those communications and your contact details to respond and maintain records.2.5 School Order FormsWhen a school signs an order form for a New Jersey or Missouri sign-up, the signer's name, title, work email, and signature are stored with the customer's account. We use them only to document the order.2.6 Platform Data vs. Personal DataThe school and district data available through the Platform (NCES identifiers, enrollment counts, Title I status, demographic breakdowns) is publicly available aggregate data, not personal data. ThinkKits does not hold individual student records or student personal information.Information We Collect
03 · PRIVACY POLICY
We use the information we collect to:• Provide, maintain, and improve the Platform• Process payments and manage subscriptions• Authenticate your identity and enforce access controls based on your account type• Send transactional emails (account confirmations, billing receipts, password resets)• Send product updates and platform announcements (you may opt out at any time)• Respond to support requests and inquiries• Detect, investigate, and prevent fraud, abuse, or security incidents• Comply with legal obligations• Analyze aggregate usage patterns to improve features and performanceWe do not sell your personal information to third parties. We do not use your personal information for targeted advertising.How We Use Your Information
04 · PRIVACY POLICY
AI and LLM data disclosure: Several ThinkKits features use the Anthropic Claude API to generate AI responses. When you use these features, your query and relevant school-level data are sent to Anthropic for processing. No student personal information, payment data, or account credentials are ever included. Per Anthropic's API Terms of Service, your data is not used to train AI models.4.1 AI FeaturesThe following features send data to the Anthropic Claude API:• Ask Me Anything: natural-language queries about schools, districts, and funding• AI Profile Summaries: automated narrative summaries for school and district profiles• Grant Narrative Generation: AI-assisted grant application drafts• Document Summarizer: summarization of user-uploaded funding documents4.2 What Is SentAI prompts contain your query text and publicly available, school-level aggregate data (school name, NCES ID, Title I status, enrollment, demographic rates). Your name, email, payment information, and any student-level records are never included in AI prompts.4.3 Data Not Used for TrainingThinkKits accesses Claude exclusively through the Anthropic API. Per Anthropic's API Terms of Service, API data is not used to train Anthropic's models without explicit consent. ThinkKits has not granted such consent.AI-Powered Features and Data Disclosure
05 · PRIVACY POLICY
We share your information only in the following circumstances:5.1 Service Providers (Sub-Processors)We share data with trusted vendors who help us operate the Platform. All sub-processors are contractually obligated to protect your data and use it only for the services they provide to ThinkKits. Our sub-processors are:• Clerk: User authentication and identity management; session management and multi-factor authentication• Stripe: Payment processing, subscription billing management, and invoice generation• Railway: Application hosting and runtime environment (US region); runs the API service and the Bifrost LLM gateway• Neo4j (Railway): Managed graph database hosting for the education knowledge graph: schools, districts, curriculum standards, and funding relationships (US region)• Neon: Managed Postgres: each account's own data store (a per-account schema) is provisioned and held there• OpenAI: Document extraction: an uploaded purchase document (invoice, quote, email) is sent to an OpenAI model to extract purchase details, directly or through the Bifrost gateway on Railway• Anthropic / Claude: AI-powered analysis, school data summarization, grant writing assistance, and natural language processing• Pinecone: Vector database for semantic search and embedding-based retrieval; a customer-uploaded report is embedded and stored there• Sentry: Application error tracking, performance monitoring, and crash reporting• PostHog: Product analytics and user behavior tracking• Vercel: Frontend hosting and Vercel Web Analytics (page-view analytics)• HubSpot: ThinkKits' own lead and contact sync: a visitor's email, name and school from the public lead-capture form are created as a HubSpot contact• Resend: ThinkKits' own outreach email to HubSpot prospects (the cold-outreach campaign and the weekly campaign): the prospect's address, subject and body are sent to Resend• Knock: Notification delivery for every user-facing message: each user's id, email, name and phone number are sent to Knock, and workflow triggers send the welcome, receipt, dunning, saved-search alert and contact-form messages (email and SMS) with their data• ShipStation: Shipping: an order number, the item list and the recipient's shipping address are sent to create a shipment• Slack: ThinkKits' own workspace alerts: billing events are posted with the Stripe customer id, invoice or charge id, amount and reason (dunning downgrade, dispute created, funds withdrawn and reinstated)• Pushover: Operations alerts to ThinkKits staff by phone push. Two alerts carry account-linked data: an account-store failure sends the Clerk user or organization id and a truncated error string (up to 200 characters), and a lazy-provisioning breaker alert names the last owner id. The morning digest sends one headline line (up to 180 characters) of the company assistant mailbox briefing5.2 Legal RequirementsWe may disclose your information if required to do so by law or in response to valid legal process (court order, subpoena, government request) where we believe disclosure is necessary to comply with a legal obligation, protect our rights or property, or prevent harm to ThinkKits, our users, or the public.5.3 Business TransfersIf ThinkKits is acquired, merged, or sells substantially all of its assets, your information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.5.4 With Your ConsentWe may share information in other circumstances with your explicit consent.Information Sharing
06 · PRIVACY POLICY
We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods:• Account data: Retained while your account is active. Deleted within 90 days of account closure upon request.• Usage logs: Retained for 12 months, then aggregated or deleted.• Payment records: Retained for 7 years for tax and compliance purposes.• AI interaction logs: Retained for a maximum of 90 days (see Section 4).• Support communications: Retained for 3 years after resolution.Data Retention
07 · PRIVACY POLICY
ThinkKits implements industry-standard security measures to protect your information, including:• TLS/HTTPS encryption for all data in transit• Encryption at rest for sensitive data fields• Role-based access controls limiting internal access to personal data• Regular security reviews and dependency updatesNo method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to info@thinkkits.com.Security
08 · PRIVACY POLICY
ThinkKits uses essential cookies required for authentication and session management. We do not use advertising cookies or cross-site tracking. Specifically:• Authentication cookies: Set by Clerk to maintain your logged-in session. Required for the Platform to function.• Preference cookies: Store UI preferences such as selected view modes. Not shared with third parties.• Analytics: We may use anonymized, aggregate analytics to understand feature usage. No personally identifiable data is shared with analytics providers.You may disable cookies in your browser settings, though doing so will prevent you from logging in.Cookies and Tracking
09 · PRIVACY POLICY
ThinkKits is for educators, administrators and vendors. We do not collect personal information from children.Children's Privacy
10 · PRIVACY POLICY
10.1 Access and PortabilityYou may request a copy of the personal information ThinkKits holds about you. We will provide it in a machine-readable format within 30 days.10.2 CorrectionYou may update most account information directly from your account settings. For corrections not available through self-service, contact info@thinkkits.com.10.3 DeletionYou may request deletion of your account and personal information. We will process deletion requests within 30 days. Note that we may retain certain information as required by law (e.g., payment records for tax purposes) or to resolve disputes.10.4 Marketing Opt-OutYou may opt out of marketing emails at any time using the unsubscribe link in any marketing email, or by emailing info@thinkkits.com. Transactional emails (billing receipts, security notices) cannot be opted out of while your account is active.10.5 California ResidentsCalifornia residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to non-discrimination for exercising privacy rights. ThinkKits does not sell personal information. To exercise California privacy rights, contact info@thinkkits.com.10.6 Virginia, Colorado, and Other State Privacy LawsResidents of states with comprehensive privacy laws (Virginia CDPA, Colorado CPA, Connecticut CTDPA, and others) have similar rights. Contact info@thinkkits.com to exercise these rights.Your Rights and Choices
11 · PRIVACY POLICY
ThinkKits is designed for use by education professionals researching publicly available school and district data. We are committed to responsible data practices consistent with applicable federal and state education privacy law:• Student and children's data: We hold no student or children's data. Our data is public, aggregate school and district data.Education Data Compliance
12 · PRIVACY POLICY
We may update this Privacy Policy from time to time. For material changes, we will provide notice via email and in-app notification at least 30 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after the effective date of an updated policy constitutes your acceptance of the changes.Changes to This Policy
13 · PRIVACY POLICY
For privacy questions, requests, or concerns:Questions, requests and concerns: info@thinkkits.comMailing address: ThinkKits LLC · 151 Discovery Dr Ste 107, Colmar, PA 18915Phone: (267) 936-0332Our team responds to all privacy inquiries within 5 business days.Contact
Questions About This Privacy Policy?
Our team responds to all privacy inquiries within 5 business days.← Back to Platform
Privacy Policy
Effective: March 28, 2026 · Last Updated: October 30, 2026 · ThinkKits LLC · 151 Discovery Dr Ste 107, Colmar, PA 18915PRIVACY SUMMARY
ThinkKits collects only what it needs to run the platform, protects it with industry-standard security, and never sells it. Our core data, the school and district intelligence you research, is publicly available data from federal sources. This policy explains what we collect about you as a user.What we collect, and what we never do
INDEX
Table of Contents
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
01 · PRIVACY POLICY
ThinkKits LLC ("ThinkKits," "we," "us," or "our") is a Pennsylvania limited liability company operating the ThinkKits education intelligence platform at app.thinkkits.com. We are the data controller for personal information collected through the Platform.Questions about this Privacy Policy may be directed to info@thinkkits.com.Who We Are
02 · PRIVACY POLICY
2.1 Account InformationWhen you create an account, we collect:• Name and email address• Organization name and role (if provided)• Password (stored as a secure hash; we never store plaintext passwords)• Account type and billing statusAccount authentication is handled by Clerk. See Clerk's privacy policy for details on how authentication credentials are stored.2.2 Usage DataWe automatically collect information about how you use the Platform:• Pages visited, features used, searches performed• Timestamps and session duration• IP address and approximate geographic location (country/state level)• Browser type, operating system, and device type• Referring URL2.3 Payment InformationPayment processing is handled entirely by Stripe. ThinkKits does not store credit card numbers, CVVs, or full payment card details. We retain only a Stripe customer ID and the last four digits of your card for billing management purposes.2.4 CommunicationsIf you contact us by email or through the Platform, we retain those communications and your contact details to respond and maintain records.2.5 School Order FormsWhen a school signs an order form for a New Jersey or Missouri sign-up, the signer's name, title, work email, and signature are stored with the customer's account. We use them only to document the order.2.6 Platform Data vs. Personal DataThe school and district data available through the Platform (NCES identifiers, enrollment counts, Title I status, demographic breakdowns) is publicly available aggregate data, not personal data. ThinkKits does not hold individual student records or student personal information.Information We Collect
03 · PRIVACY POLICY
We use the information we collect to:• Provide, maintain, and improve the Platform• Process payments and manage subscriptions• Authenticate your identity and enforce access controls based on your account type• Send transactional emails (account confirmations, billing receipts, password resets)• Send product updates and platform announcements (you may opt out at any time)• Respond to support requests and inquiries• Detect, investigate, and prevent fraud, abuse, or security incidents• Comply with legal obligations• Analyze aggregate usage patterns to improve features and performanceWe do not sell your personal information to third parties. We do not use your personal information for targeted advertising.How We Use Your Information
04 · PRIVACY POLICY
AI and LLM data disclosure: Several ThinkKits features use the Anthropic Claude API to generate AI responses. When you use these features, your query and relevant school-level data are sent to Anthropic for processing. No student personal information, payment data, or account credentials are ever included. Per Anthropic's API Terms of Service, your data is not used to train AI models.4.1 AI FeaturesThe following features send data to the Anthropic Claude API:• Ask Me Anything: natural-language queries about schools, districts, and funding• AI Profile Summaries: automated narrative summaries for school and district profiles• Grant Narrative Generation: AI-assisted grant application drafts• Document Summarizer: summarization of user-uploaded funding documents4.2 What Is SentAI prompts contain your query text and publicly available, school-level aggregate data (school name, NCES ID, Title I status, enrollment, demographic rates). Your name, email, payment information, and any student-level records are never included in AI prompts.4.3 Data Not Used for TrainingThinkKits accesses Claude exclusively through the Anthropic API. Per Anthropic's API Terms of Service, API data is not used to train Anthropic's models without explicit consent. ThinkKits has not granted such consent.AI-Powered Features and Data Disclosure
05 · PRIVACY POLICY
We share your information only in the following circumstances:5.1 Service Providers (Sub-Processors)We share data with trusted vendors who help us operate the Platform. All sub-processors are contractually obligated to protect your data and use it only for the services they provide to ThinkKits. Our sub-processors are:• Clerk: User authentication and identity management; session management and multi-factor authentication• Stripe: Payment processing, subscription billing management, and invoice generation• Railway: Application hosting and runtime environment (US region); runs the API service and the Bifrost LLM gateway• Neo4j (Railway): Managed graph database hosting for the education knowledge graph: schools, districts, curriculum standards, and funding relationships (US region)• Neon: Managed Postgres: each account's own data store (a per-account schema) is provisioned and held there• OpenAI: Document extraction: an uploaded purchase document (invoice, quote, email) is sent to an OpenAI model to extract purchase details, directly or through the Bifrost gateway on Railway• Anthropic / Claude: AI-powered analysis, school data summarization, grant writing assistance, and natural language processing• Pinecone: Vector database for semantic search and embedding-based retrieval; a customer-uploaded report is embedded and stored there• Sentry: Application error tracking, performance monitoring, and crash reporting• PostHog: Product analytics and user behavior tracking• Vercel: Frontend hosting and Vercel Web Analytics (page-view analytics)• HubSpot: ThinkKits' own lead and contact sync: a visitor's email, name and school from the public lead-capture form are created as a HubSpot contact• Resend: ThinkKits' own outreach email to HubSpot prospects (the cold-outreach campaign and the weekly campaign): the prospect's address, subject and body are sent to Resend• Knock: Notification delivery for every user-facing message: each user's id, email, name and phone number are sent to Knock, and workflow triggers send the welcome, receipt, dunning, saved-search alert and contact-form messages (email and SMS) with their data• ShipStation: Shipping: an order number, the item list and the recipient's shipping address are sent to create a shipment• Slack: ThinkKits' own workspace alerts: billing events are posted with the Stripe customer id, invoice or charge id, amount and reason (dunning downgrade, dispute created, funds withdrawn and reinstated)• Pushover: Operations alerts to ThinkKits staff by phone push. Two alerts carry account-linked data: an account-store failure sends the Clerk user or organization id and a truncated error string (up to 200 characters), and a lazy-provisioning breaker alert names the last owner id. The morning digest sends one headline line (up to 180 characters) of the company assistant mailbox briefing5.2 Legal RequirementsWe may disclose your information if required to do so by law or in response to valid legal process (court order, subpoena, government request) where we believe disclosure is necessary to comply with a legal obligation, protect our rights or property, or prevent harm to ThinkKits, our users, or the public.5.3 Business TransfersIf ThinkKits is acquired, merged, or sells substantially all of its assets, your information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.5.4 With Your ConsentWe may share information in other circumstances with your explicit consent.Information Sharing
06 · PRIVACY POLICY
We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods:• Account data: Retained while your account is active. Deleted within 90 days of account closure upon request.• Usage logs: Retained for 12 months, then aggregated or deleted.• Payment records: Retained for 7 years for tax and compliance purposes.• AI interaction logs: Retained for a maximum of 90 days (see Section 4).• Support communications: Retained for 3 years after resolution.Data Retention
07 · PRIVACY POLICY
ThinkKits implements industry-standard security measures to protect your information, including:• TLS/HTTPS encryption for all data in transit• Encryption at rest for sensitive data fields• Role-based access controls limiting internal access to personal data• Regular security reviews and dependency updatesNo method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to info@thinkkits.com.Security
08 · PRIVACY POLICY
ThinkKits uses essential cookies required for authentication and session management. We do not use advertising cookies or cross-site tracking. Specifically:• Authentication cookies: Set by Clerk to maintain your logged-in session. Required for the Platform to function.• Preference cookies: Store UI preferences such as selected view modes. Not shared with third parties.• Analytics: We may use anonymized, aggregate analytics to understand feature usage. No personally identifiable data is shared with analytics providers.You may disable cookies in your browser settings, though doing so will prevent you from logging in.Cookies and Tracking
09 · PRIVACY POLICY
ThinkKits is for educators, administrators and vendors. We do not collect personal information from children.Children's Privacy
10 · PRIVACY POLICY
10.1 Access and PortabilityYou may request a copy of the personal information ThinkKits holds about you. We will provide it in a machine-readable format within 30 days.10.2 CorrectionYou may update most account information directly from your account settings. For corrections not available through self-service, contact info@thinkkits.com.10.3 DeletionYou may request deletion of your account and personal information. We will process deletion requests within 30 days. Note that we may retain certain information as required by law (e.g., payment records for tax purposes) or to resolve disputes.10.4 Marketing Opt-OutYou may opt out of marketing emails at any time using the unsubscribe link in any marketing email, or by emailing info@thinkkits.com. Transactional emails (billing receipts, security notices) cannot be opted out of while your account is active.10.5 California ResidentsCalifornia residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to non-discrimination for exercising privacy rights. ThinkKits does not sell personal information. To exercise California privacy rights, contact info@thinkkits.com.10.6 Virginia, Colorado, and Other State Privacy LawsResidents of states with comprehensive privacy laws (Virginia CDPA, Colorado CPA, Connecticut CTDPA, and others) have similar rights. Contact info@thinkkits.com to exercise these rights.Your Rights and Choices
11 · PRIVACY POLICY
ThinkKits is designed for use by education professionals researching publicly available school and district data. We are committed to responsible data practices consistent with applicable federal and state education privacy law:• Student and children's data: We hold no student or children's data. Our data is public, aggregate school and district data.Education Data Compliance
12 · PRIVACY POLICY
We may update this Privacy Policy from time to time. For material changes, we will provide notice via email and in-app notification at least 30 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after the effective date of an updated policy constitutes your acceptance of the changes.Changes to This Policy
13 · PRIVACY POLICY
For privacy questions, requests, or concerns:Questions, requests and concerns: info@thinkkits.comMailing address: ThinkKits LLC · 151 Discovery Dr Ste 107, Colmar, PA 18915Phone: (267) 936-0332Our team responds to all privacy inquiries within 5 business days.Contact
Questions About This Privacy Policy?
Our team responds to all privacy inquiries within 5 business days.Back to Platform
Privacy Policy
Effective: March 28, 2026 · Last Updated: October 30, 2026 · ThinkKits LLC · 151 Discovery Dr Ste 107, Colmar, PA 18915PRIVACY SUMMARYWhat we collect, and what we never do
ThinkKits collects only what it needs to run the platform, protects it with industry-standard security, and never sells it. Our core data, the school and district intelligence you research, is publicly available data from federal sources. This policy explains what we collect about you as a user.
INDEXTable of Contents
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
01 · PRIVACY POLICYWho We Are
ThinkKits LLC ("ThinkKits," "we," "us," or "our") is a Pennsylvania limited liability company operating the ThinkKits education intelligence platform at app.thinkkits.com. We are the data controller for personal information collected through the Platform.Questions about this Privacy Policy may be directed to info@thinkkits.com.
02 · PRIVACY POLICYInformation We Collect
2.1 Account InformationWhen you create an account, we collect:• Name and email address• Organization name and role (if provided)• Password (stored as a secure hash; we never store plaintext passwords)• Account type and billing statusAccount authentication is handled by Clerk. See Clerk's privacy policy for details on how authentication credentials are stored.2.2 Usage DataWe automatically collect information about how you use the Platform:• Pages visited, features used, searches performed• Timestamps and session duration• IP address and approximate geographic location (country/state level)• Browser type, operating system, and device type• Referring URL2.3 Payment InformationPayment processing is handled entirely by Stripe. ThinkKits does not store credit card numbers, CVVs, or full payment card details. We retain only a Stripe customer ID and the last four digits of your card for billing management purposes.2.4 CommunicationsIf you contact us by email or through the Platform, we retain those communications and your contact details to respond and maintain records.2.5 School Order FormsWhen a school signs an order form for a New Jersey or Missouri sign-up, the signer's name, title, work email, and signature are stored with the customer's account. We use them only to document the order.2.6 Platform Data vs. Personal DataThe school and district data available through the Platform (NCES identifiers, enrollment counts, Title I status, demographic breakdowns) is publicly available aggregate data, not personal data. ThinkKits does not hold individual student records or student personal information.
03 · PRIVACY POLICYHow We Use Your Information
We use the information we collect to:• Provide, maintain, and improve the Platform• Process payments and manage subscriptions• Authenticate your identity and enforce access controls based on your account type• Send transactional emails (account confirmations, billing receipts, password resets)• Send product updates and platform announcements (you may opt out at any time)• Respond to support requests and inquiries• Detect, investigate, and prevent fraud, abuse, or security incidents• Comply with legal obligations• Analyze aggregate usage patterns to improve features and performanceWe do not sell your personal information to third parties. We do not use your personal information for targeted advertising.
04 · PRIVACY POLICYAI-Powered Features and Data Disclosure
AI and LLM data disclosure: Several ThinkKits features use the Anthropic Claude API to generate AI responses. When you use these features, your query and relevant school-level data are sent to Anthropic for processing. No student personal information, payment data, or account credentials are ever included. Per Anthropic's API Terms of Service, your data is not used to train AI models.4.1 AI FeaturesThe following features send data to the Anthropic Claude API:• Ask Me Anything: natural-language queries about schools, districts, and funding• AI Profile Summaries: automated narrative summaries for school and district profiles• Grant Narrative Generation: AI-assisted grant application drafts• Document Summarizer: summarization of user-uploaded funding documents4.2 What Is SentAI prompts contain your query text and publicly available, school-level aggregate data (school name, NCES ID, Title I status, enrollment, demographic rates). Your name, email, payment information, and any student-level records are never included in AI prompts.4.3 Data Not Used for TrainingThinkKits accesses Claude exclusively through the Anthropic API. Per Anthropic's API Terms of Service, API data is not used to train Anthropic's models without explicit consent. ThinkKits has not granted such consent.
05 · PRIVACY POLICYInformation Sharing
We share your information only in the following circumstances:5.1 Service Providers (Sub-Processors)We share data with trusted vendors who help us operate the Platform. All sub-processors are contractually obligated to protect your data and use it only for the services they provide to ThinkKits. Our sub-processors are:• Clerk: User authentication and identity management; session management and multi-factor authentication• Stripe: Payment processing, subscription billing management, and invoice generation• Railway: Application hosting and runtime environment (US region); runs the API service and the Bifrost LLM gateway• Neo4j (Railway): Managed graph database hosting for the education knowledge graph: schools, districts, curriculum standards, and funding relationships (US region)• Neon: Managed Postgres: each account's own data store (a per-account schema) is provisioned and held there• OpenAI: Document extraction: an uploaded purchase document (invoice, quote, email) is sent to an OpenAI model to extract purchase details, directly or through the Bifrost gateway on Railway• Anthropic / Claude: AI-powered analysis, school data summarization, grant writing assistance, and natural language processing• Pinecone: Vector database for semantic search and embedding-based retrieval; a customer-uploaded report is embedded and stored there• Sentry: Application error tracking, performance monitoring, and crash reporting• PostHog: Product analytics and user behavior tracking• Vercel: Frontend hosting and Vercel Web Analytics (page-view analytics)• HubSpot: ThinkKits' own lead and contact sync: a visitor's email, name and school from the public lead-capture form are created as a HubSpot contact• Resend: ThinkKits' own outreach email to HubSpot prospects (the cold-outreach campaign and the weekly campaign): the prospect's address, subject and body are sent to Resend• Knock: Notification delivery for every user-facing message: each user's id, email, name and phone number are sent to Knock, and workflow triggers send the welcome, receipt, dunning, saved-search alert and contact-form messages (email and SMS) with their data• ShipStation: Shipping: an order number, the item list and the recipient's shipping address are sent to create a shipment• Slack: ThinkKits' own workspace alerts: billing events are posted with the Stripe customer id, invoice or charge id, amount and reason (dunning downgrade, dispute created, funds withdrawn and reinstated)• Pushover: Operations alerts to ThinkKits staff by phone push. Two alerts carry account-linked data: an account-store failure sends the Clerk user or organization id and a truncated error string (up to 200 characters), and a lazy-provisioning breaker alert names the last owner id. The morning digest sends one headline line (up to 180 characters) of the company assistant mailbox briefing5.2 Legal RequirementsWe may disclose your information if required to do so by law or in response to valid legal process (court order, subpoena, government request) where we believe disclosure is necessary to comply with a legal obligation, protect our rights or property, or prevent harm to ThinkKits, our users, or the public.5.3 Business TransfersIf ThinkKits is acquired, merged, or sells substantially all of its assets, your information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.5.4 With Your ConsentWe may share information in other circumstances with your explicit consent.
06 · PRIVACY POLICYData Retention
We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods:• Account data: Retained while your account is active. Deleted within 90 days of account closure upon request.• Usage logs: Retained for 12 months, then aggregated or deleted.• Payment records: Retained for 7 years for tax and compliance purposes.• AI interaction logs: Retained for a maximum of 90 days (see Section 4).• Support communications: Retained for 3 years after resolution.
07 · PRIVACY POLICYSecurity
ThinkKits implements industry-standard security measures to protect your information, including:• TLS/HTTPS encryption for all data in transit• Encryption at rest for sensitive data fields• Role-based access controls limiting internal access to personal data• Regular security reviews and dependency updatesNo method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to info@thinkkits.com.
08 · PRIVACY POLICYCookies and Tracking
ThinkKits uses essential cookies required for authentication and session management. We do not use advertising cookies or cross-site tracking. Specifically:• Authentication cookies: Set by Clerk to maintain your logged-in session. Required for the Platform to function.• Preference cookies: Store UI preferences such as selected view modes. Not shared with third parties.• Analytics: We may use anonymized, aggregate analytics to understand feature usage. No personally identifiable data is shared with analytics providers.You may disable cookies in your browser settings, though doing so will prevent you from logging in.
09 · PRIVACY POLICYChildren's Privacy
ThinkKits is for educators, administrators and vendors. We do not collect personal information from children.
10 · PRIVACY POLICYYour Rights and Choices
10.1 Access and PortabilityYou may request a copy of the personal information ThinkKits holds about you. We will provide it in a machine-readable format within 30 days.10.2 CorrectionYou may update most account information directly from your account settings. For corrections not available through self-service, contact info@thinkkits.com.10.3 DeletionYou may request deletion of your account and personal information. We will process deletion requests within 30 days. Note that we may retain certain information as required by law (e.g., payment records for tax purposes) or to resolve disputes.10.4 Marketing Opt-OutYou may opt out of marketing emails at any time using the unsubscribe link in any marketing email, or by emailing info@thinkkits.com. Transactional emails (billing receipts, security notices) cannot be opted out of while your account is active.10.5 California ResidentsCalifornia residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to non-discrimination for exercising privacy rights. ThinkKits does not sell personal information. To exercise California privacy rights, contact info@thinkkits.com.10.6 Virginia, Colorado, and Other State Privacy LawsResidents of states with comprehensive privacy laws (Virginia CDPA, Colorado CPA, Connecticut CTDPA, and others) have similar rights. Contact info@thinkkits.com to exercise these rights.
11 · PRIVACY POLICYEducation Data Compliance
ThinkKits is designed for use by education professionals researching publicly available school and district data. We are committed to responsible data practices consistent with applicable federal and state education privacy law:• Student and children's data: We hold no student or children's data. Our data is public, aggregate school and district data.
12 · PRIVACY POLICYChanges to This Policy
We may update this Privacy Policy from time to time. For material changes, we will provide notice via email and in-app notification at least 30 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after the effective date of an updated policy constitutes your acceptance of the changes.
13 · PRIVACY POLICYContact
For privacy questions, requests, or concerns:Questions, requests and concerns: info@thinkkits.comMailing address: ThinkKits LLC · 151 Discovery Dr Ste 107, Colmar, PA 18915Phone: (267) 936-0332Our team responds to all privacy inquiries within 5 business days.