Your research is yours. Your personal data should be, too.

MacroThesis is the controller of personal information processed through the MacroThesis website, accounts, emails and related services. In this notice, “MacroThesis”, “we”, “us” and “our” refer to the operator of the MacroThesis service.

This notice applies to visitors, registered users and people who communicate with us. It does not govern third-party websites, podcasts or source platforms linked from the service; their own privacy notices apply.

• Account information: email address, internal user identifier, account creation date and subscription plan.
• Research activity: thinkers you follow, items you save, private notes you add and related timestamps.
• Authentication and technical data: session identifiers, IP address, browser and device information, request logs and security events generated when you use the service.
• Communications: messages, correction requests, support enquiries and email preferences.
• Payment information: if paid plans are offered, our payment provider processes payment-card and billing details. MacroThesis may receive transaction, subscription and customer identifiers, but not full payment-card numbers.

We receive information directly from you, automatically from your use of the service and from service providers acting on our behalf. You may browse public editorial pages without creating an account.

• To create and secure your account, authenticate sessions and provide features you request, including follows, saved items and notes. For EEA and UK users, the legal basis is performance of our contract with you.
• To send login codes, service notices, followed-thinker alerts and digests you request. The basis is performance of the service or our legitimate interests in operating it.
• To troubleshoot, protect against abuse, maintain reliability and understand how the product performs. The basis is our legitimate interests in security and improvement.
• To send optional marketing communications where you have consented, where consent is required. You may withdraw consent at any time.
• To process subscriptions, keep tax and accounting records and comply with legal obligations, where paid plans are offered.

Where we rely on legitimate interests, we consider the impact on your rights and use personal information only where those interests are not overridden by your interests or fundamental rights. We do not make decisions producing legal or similarly significant effects about users solely through automated processing.

MacroThesis uses strictly necessary cookies to establish, maintain and secure signed-in sessions. These authentication cookies are required for account features to work.

We also store limited preferences on your device, such as your dark or light theme and whether the application navigation is collapsed. These preferences do not track you across unrelated websites.

We use Google Analytics to understand how the site is used. Analytics cookies are optional and load only after you consent. They stay off by default in the EEA and the UK, and you can change or withdraw your consent at any time from “Cookie preferences” in the footer.

We do not use advertising cookies or third-party cross-site behavioural advertising trackers.

We disclose personal information only as needed to operate the service, comply with law, protect rights and security, or complete a business transaction. Categories of recipients may include:

• Supabase for database hosting, account authentication and session management.
• Vercel for application hosting, delivery and technical logs.
• Google (Google Analytics) for aggregate, consent-gated usage analytics.
• Resend and related email infrastructure for authentication and service emails.
• Stripe for subscriptions and payments if paid plans are offered.
• Professional advisers, authorities or a successor organisation where reasonably necessary and permitted by law.

Service providers process information under contractual restrictions and may use it only to provide services to us. We do not sell personal information or share it for cross-context behavioural advertising.

MacroThesis serves users internationally, and our providers may process information in the United States and other countries outside your own. Those countries may have different data-protection laws.

Where European data-protection law requires a transfer mechanism, we rely on appropriate safeguards such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or another lawful mechanism. You may contact us for more information about safeguards relevant to your information.

We retain account and workspace information while your account is active and afterwards only for as long as reasonably necessary for the purposes described here, including security, dispute resolution, legal compliance and enforcement. Retention depends on the type of information, why it was collected and applicable legal requirements. Backup copies may remain for a limited period after deletion before being overwritten.

We use technical and organisational safeguards designed to protect personal information, including access controls, encrypted transport and row-level access rules for private user data. No system can guarantee absolute security.

• You can change followed thinkers, saved items and notes from your account.
• You can unsubscribe from marketing emails using the link in the email. Essential login, security, billing and service messages may still be sent.
• You can change local theme and navigation preferences in the product or clear them in your browser.
• You may request access, correction, export or deletion by contacting us. We may need to verify your identity before completing a request.

If European data-protection law applies, you may have rights to access, correct, erase or restrict personal data; receive portable data you provided; object to processing based on legitimate interests; and withdraw consent without affecting earlier lawful processing. These rights may be subject to legal conditions and exceptions.

You also have the right to complain to the data-protection authority where you live, work or believe an infringement occurred. We encourage you to contact us first so we can try to resolve the issue.

Depending on your state and subject to applicable thresholds and exceptions, you may have rights to know, access, correct, delete or obtain a copy of personal information and to appeal a decision about a request. We will not discriminate against you for exercising an applicable privacy right.

MacroThesis does not sell personal information or share it for cross-context behavioural advertising. We do not knowingly use or disclose sensitive personal information for purposes requiring a right to limit under California law.

MacroThesis is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children under 16. Contact us if you believe a child has provided information so we can review and delete it where appropriate.

We may update this notice as the product, providers or law changes. We will post the revised notice with a new effective date and provide additional notice where a change is material and the law requires it.

To ask a privacy question or exercise a privacy right, email hello@macrothesis.ai. Please write “Privacy request” in the subject and describe the request and the account email concerned. Do not send identity documents unless we specifically request them through a secure channel.