Privacy Policy

Introduction

Thirdface ("we," "our," or "us") operates the thirdface AI assistant service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at app.thirdface.com.

By using thirdface, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our service.

Information We Collect

How We Use Your Information

We use the information we collect to:

• •Create and manage your account
• •Provide personalized AI assistance based on your memories and preferences
• •Improve and optimize our service
• •Communicate with you about service updates or issues
• •Ensure the security and integrity of our platform

Data Storage and Security

Your data is encrypted with AES-256-GCM encryption before being stored. Each user has a unique encryption key that is protected by hardware security modules (HSM). We cannot read your data—only you can.

All data is stored in the European Union (Azure North Europe, Dublin) and never leaves EU borders. Our infrastructure is designed with security as the top priority, including private networks, TLS 1.3, and isolated environments.

For detailed technical information about our security practices, visit our Security page.

Information Sharing

We do not sell, trade, or rent your personal information to third parties.

We may share information only in the following circumstances:

• •With your consent: When you explicitly authorize us to share specific information
• •Errand browser provider:Errands run in a cloud browser operated by Browser Use, our processor for that service. When you sign into a website inside thirdface for an errand, we copy that website's signed-in session (its cookies) into your browser profile at Browser Use. Your password goes to that website only; thirdface never receives or stores it. The session stays in that profile until you sign out of the site in Settings, or until you delete your account
• •Legal requirements: If required by law, court order, or government request (though due to encryption, we can only provide encrypted data that we cannot decrypt)
• •Service providers: With trusted partners who assist in operating our service (e.g., cloud infrastructure), bound by strict confidentiality agreements

Third-Party Services

We use the following third-party services:

• •Google OAuth: For secure authentication. We only request access to your basic profile information (name, email, profile picture). We do not request access to your Gmail, Google Drive, or other Google services.
• •Microsoft Azure: For cloud infrastructure and key management. All data is processed and stored within the EU.
• •AI Model Providers: We use AI models to power the assistant. Your conversations are processed by these models but are not used to train them.

Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• •Access: Request a copy of the personal data we hold about you
• •Rectification: Correct any inaccurate or incomplete data
• •Erasure: Request deletion of your personal data
• •Portability: Receive your data in a structured, machine-readable format
• •Restriction: Request that we limit how we use your data
• •Objection: Object to our processing of your personal data

To exercise any of these rights, contact us at support@thirdface.com.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services.

If you delete your account, we will delete your personal data within 30 days, except where we are required to retain certain information for legal or regulatory purposes.

Operational logs that do not contain personal data may be retained for up to 90 days for security and debugging purposes.

Children's Privacy

Thirdface is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at support@thirdface.com, and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• •Posting the new Privacy Policy on this page
• •Updating the "Last updated" date at the top of this policy
• •Sending you an email notification for significant changes

Your continued use of thirdface after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• •Privacy inquiries: support@thirdface.com
• •Security concerns: support@thirdface.com
• •General support: support@thirdface.com