Privacy Policy

Thorn Street, Inc. ("Thorn Street," "we," "us," or "our") makes Leif, an AI assistant for geographic and spatial work at platform.thornstreet.com, and runs the website at thornstreet.com. This Privacy Policy describes how we collect, use and share personal information through our website, Leif, the Published Links people make with Leif, and our communications and other activities that link to this policy (together, the "Services").

Notice at collection for California residents, and other U.S. state privacy rights: see the State privacy rights section below.

Notice to users in Europe: see the Notice to European users section below.

Business customers: when a company uses Leif under a written agreement with us and gives us personal information about other people to process for it, we process that information on the company's behalf, under our agreement with it, and the company's own privacy policy applies. This policy covers the personal information we handle for our own purposes.

Personal information we collect

Information you give us

• Contact and account data, such as your name, email address, and, if you join our waitlist, your role and the first question you'd ask Leif. If you contact us about our services, we also collect your phone number, company or organization, and what you tell us about your project.
• Your Content: what you put into Leif and what Leif works on for you, including your messages and instructions, files you upload, files and layers you connect from Google Drive or ArcGIS, and the data Leif retrieves and the files and maps it makes. Your Content may include personal information about you or about others, depending on what you work on.
• Memory: a short profile of who you are and how you like work done, which you and Leif write and every new thread starts with. Leif adds what you ask it to remember and, if you let it, habits it notices across your threads.
• Communications, such as your emails to us, the feedback you send from Leif's Settings, and, if you delete your account, why you left.
• Payment data. When you buy a plan or make a purchase, our payment processor (currently Stripe) collects your payment card or bank details directly. We receive a record of your plan, payments and invoices, and the billing details you give it, such as your name, email address and billing address, but not your full card number.

Information we collect automatically

• Sign-in and security data: your sign-in sessions, with the IP address and browser they came from, and the codes and tokens used to sign you in.
• Usage data: how you use Leif, such as when threads start and how long they take, how each request ends, the tools Leif uses, errors, the number of AI tokens used and what each call cost. This data does not include the content of your requests.
• Records of calls to our providers: for each AI model call, web search or location lookup Leif makes for you, its cost, status and any error. These records do not include your prompts or Leif's answers, but the address of a web search can contain its query.
• Published Link data: how many times your Published Links are viewed, and the requests and data served to view them. We do not identify the people who view them.
• Log data: our servers and network keep logs of connections to and from our systems and of names they look up, for 30 days, for security and troubleshooting.
• Cookies and similar technologies: see Cookies below and our Cookie Notice at https://thornstreet.com/cookie-notice.

We do not collect the precise location of your device.

Information from third parties

• Sign-in providers. If you sign in with Google or Microsoft, we receive your name, email address and, if available, profile picture from that account.
• Google Drive. If you connect Google Drive, see Google user data in Leif below.
• ArcGIS. If you connect ArcGIS Online or your organization's ArcGIS Enterprise portal, we receive and keep your ArcGIS username and organization ID, the portal's address, and the access ArcGIS grants us (encrypted). Leif uses it, as you, only to search and read your organization's layers and to publish results to your account when you ask. Layers Leif downloads become part of Your Content.
• Data sources. When Leif retrieves data for you, such as public records, maps and web search results, that data may include personal information, such as the names in public records or on web pages. It becomes part of Your Content.

Google user data in Leif

Leif lets you connect a Google account so it can work with files in your Google Drive. If you connect one:

• What Leif can access: your Google account's email address, and only the Google Drive files you choose with Google's file picker or that Leif creates for you. Leif can't see the rest of your Drive.
• How it's used: only to do what you ask Leif to do with those files, such as reading, downloading, editing, or creating them. Their contents are sent to the AI model that powers Leif only to carry out your request.
• What we keep: the access Google grants us (encrypted), your Google email address, and the list of files you chose. File contents Leif works with stay in the Leif thread where you used them, until you delete it.
• What we don't do: we don't sell Google user data or use it for advertising, and it isn't used to train AI models, by us or by our AI model provider. People don't read it, except with your permission, for security, or where the law requires it.
• Your choices: in Leif, Settings → Integrations lets you remove files or disconnect Google at any time, which deletes what we keep. You can also remove Leif's access at https://myaccount.google.com/permissions.

Leif's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

How we use personal information

• To provide the Services: to create and run your account, carry out your requests in Leif, store your threads and files, keep your Memory, publish and serve your Published Links, process payments, and provide support.
• To run Leif's AI: your messages, files, Memory and the results of Leif's tools are sent to the AI models that power Leif so they can answer you. AI models also name your threads from your first message, write Field Notes (Leif's record of what your threads found) and suggest additions to Memory. Field Notes are indexed with text embeddings so you can search them.
• To improve Leif, if you allow it: while "Help improve Leif" (Settings → Account) is on, our staff may review your threads (what you asked, the steps Leif took, and its answers) to find and fix problems and improve Leif. While it is off, staff see only usage numbers, not the content of your threads. The setting is on for new accounts. You can turn it on or off at any time, and turning it off deletes what staff could review.
• To understand and improve the Services using usage data and aggregated or de-identified data. We do not use Your Content to train generative AI models, and our AI model provider may not train its models on it.
• To communicate with you about your account, purchases, changes to the Services or our terms, security, and your requests, and, if you have agreed or the law allows, about our products. You can opt out of marketing emails at any time.
• For security and compliance: to protect the Services, our users and others, to prevent fraud and abuse, to enforce our terms, to comply with law and legal process, and to establish or defend legal claims.
• With your consent, or as we otherwise tell you when we collect the information.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

How we share personal information

• Service providers that host and operate the Services for us under contracts that limit their use of the information to providing services to us. They include our cloud host, our AI model providers and our payment processor. We may add or change these providers at any time; our current list is at https://thornstreet.com/subprocessors.
• Data providers Leif asks on your behalf. To answer your requests, Leif sends queries to data providers, for example a search query to our web search provider, an address to our geocoding provider, or the area of a map to an OpenStreetMap server. Those queries can contain personal information if your request does. Maps in Leif and in Published Links load map tiles in the browser directly from map providers, which then see the viewer's IP address. We choose and change these providers at our discretion; our Data Sources page at https://thornstreet.com/data-sources explains what they receive.
• Services you connect, such as Google Drive or ArcGIS, when you ask Leif to work with them, including results Leif publishes to them at your request.
• The public, when you publish. Anyone with a Published Link can see what it shows, and may copy and share it. Do not publish personal information you do not want to be public.
• Professional advisers, such as lawyers, accountants and auditors.
• Authorities and others, when we believe in good faith that it is required by law or legal process, or necessary to protect the rights, property or safety of us, our users or others.
• Business transferees, in connection with an actual or proposed financing, merger, acquisition, sale of assets or similar transaction, or in insolvency.
• Others, with your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Cookies

We use only the cookies and similar technologies needed to run the Services, such as keeping you signed in and remembering your settings. We do not use advertising or third-party analytics cookies. Our Cookie Notice at https://thornstreet.com/cookie-notice has the details.

Sensitive information

Other people's sensitive information. Don't put it into Leif. Our Acceptable Use Policy prohibits submitting other people's health information, ID or financial account numbers and other restricted records unless we've agreed in writing. We haven't agreed to receive it and don't monitor for it; if someone submits it anyway, they are responsible for it, and it gets the same security as everything else we hold, nothing more. We may delete it when we find it.

Your own information. We don't ask for sensitive information about you, such as about your health, racial or ethnic origin, religion, sexual orientation or biometrics. What you share about yourself is up to you. If you tell Leif something sensitive about yourself, for example a health need you want it to take into account, it's handled like the rest of Your Content: it's sent to our AI model providers so Leif can answer you, it can appear in that thread's Field Notes, and it can join Memory if you ask Leif to remember it, or if Leif notices it as a habit across several threads. You decide, with these controls:

• Field Notes: turn Field Notes off for a thread (in its menu) before you share something you don't want kept. Turns that end while it's off never go into Field Notes, and Leif doesn't learn habits from them.
• Memory: remove any line in Settings → Account, or switch off Leif's changes to it so that only you change it.
• Delete the thread: this deletes its Field Notes, and it stops counting toward habits.
• Help improve Leif: turn it off so our staff don't see the thread.

We use sensitive information you share about yourself only to provide the Services to you and, while "Help improve Leif" is on, for our staff's review of your threads, not to infer characteristics about you for any other purpose.

How long we keep personal information

Information	How long we keep it
Account data (name, email address, when you joined)	Until you delete your account. A record of the account without your name or email address stays, so that billing, usage numbers and feedback still add up
Sign-in sessions (with IP address and browser), sign-in codes and tokens	Sign-in sessions until you sign out of them or delete your account (one that expires stays until you delete your account); Google or Microsoft sign-in tokens until you delete your account; sign-in codes until they're used, or a later sign-in after they expire
Your threads and projects in Leif: the conversation, files you upload and Leif makes, Field Notes, and thread records	Until you delete the thread or project, or your account. Backup copies are deleted within 30 days after that
Memory, and habits waiting to join it	Until you edit or remove them, or delete your account. A habit that doesn't join Memory is dropped when it's among the oldest beyond 100
Published Links and their copies	Until you take the link down or delete your account (a link outlives the thread it came from). Backup copies are deleted within 30 days after that
Thread content our staff can review (only while "Help improve Leif" is on)	Until you turn the setting off, or delete the thread or your account
Usage data (contains no content)	As long as we provide the Services
Records of calls to our providers (a web search's record can contain its query)	As long as we provide the Services
Google Drive and ArcGIS connections	Until you disconnect them or delete your account; we also revoke our access at Google or ArcGIS
Billing records	At least 7 years, for tax, accounting and legal purposes, including after you delete your account. Our payment processor keeps your email address and invoices under its own policy
Feedback	As long as we provide the Services, without your name after you delete your account
If you delete your account: why you left (if you tell us), and a summary of the account as it closed (its plan, allowance left, number of threads, when it first and last used Leif, its waitlist role), without your name or email address	As long as we provide the Services
Waitlist entries	Until you delete your account or ask us to delete it
Emails and inquiries about our services	As long as needed to manage our relationship with you
Server, network and DNS logs	30 days

We may keep information longer where the law requires it, or to establish or defend legal claims. Deleted information can stay in our backups for up to 30 days.

Your choices

• Your account: you can update your name, and delete your account, in Settings → Account. Deleting it deletes your threads and projects, Published Links, Memory and connections, as the table above describes. To change your email address, contact us at privacy@thornstreet.com.
• Your threads and Published Links: you can delete threads and projects, and take down Published Links, in Leif at any time.
• Memory: you can see and edit it in Settings → Account, and switch off Leif's changes to it, so only you change it.
• Field Notes: you can switch Field Notes off for a thread.
• Help improve Leif: you can turn this setting on or off in Settings → Account.
• Google Drive and ArcGIS: you can remove files or disconnect either one in Settings → Integrations.
• Marketing emails: use the unsubscribe link in the email, or contact us. We may still send you messages about your account and the Services.
• Cookies: see our Cookie Notice.
• Declining to provide information: we need some information, such as an email address, to provide the Services. Without it, we may not be able to provide them.

Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest and access controls. No system is completely secure, and we cannot guarantee the security of your information. To report a security concern, email security@thornstreet.com.

International data transfers

We are based in the United States, and we and our service providers process personal information in the United States and possibly other countries, whose laws may not be as protective as those where you live. Users in Europe should read the Notice to European users below.

Children

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, if a change is material, we will tell you by email or in the Services before it takes effect.

How to contact us

Thorn Street, Inc.
3152 30th Street, San Diego, CA 92104, United States
Email: privacy@thornstreet.com

State privacy rights

This section applies to residents of U.S. states whose privacy laws apply to us and give their residents the rights described below ("State Privacy Laws"), including California. In it, "personal information" includes "personal data" and similar terms in those laws.

Your rights. Depending on where you live, you may have the right to:

• Know and access: ask what personal information we have collected about you, the categories of sources, the purposes for which we use it, and the categories of third parties we disclose it to, and get a copy of it.
• Correct inaccurate personal information.
• Delete personal information we collected from you.
• Portability: receive your personal information in a portable format.
• Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling. We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects.
• Limit the use of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require us to offer this right.
• Appeal our decision on your request, by replying to our decision.
• Non-discrimination: we will not discriminate against you for exercising these rights.

How to exercise them. Email privacy@thornstreet.com. We will verify your request by confirming you control the email address on your account or, if you have no account, by asking for information that matches what we hold. You may use an authorized agent; we may ask the agent for proof of your signed permission, and ask you to verify your identity directly. We honor Global Privacy Control signals as requests to opt out of sales and sharing where the law requires, although we do neither.

Consumers under 16. We do not have actual knowledge that we sell or share the personal information of consumers under 16.

De-identified information. We do not attempt to re-identify de-identified information, except to test that our de-identification works.

What we collect, use and disclose. The table below describes our practices now and in the 12 months before the effective date of this policy, using the categories of the California Consumer Privacy Act.

Category (CCPA)	What it includes	Purposes	Disclosed for a business purpose to	Sold or shared
Identifiers	Name, email address, IP address, account and customer IDs	Providing the Services, communications, security, billing	Service providers; connected services at your direction	None
Customer records and commercial information	Billing details, plans, purchases and invoices	Billing, providing the Services, compliance	Payment processor; professional advisers	None
Internet or other electronic network activity	Sign-in sessions, usage data, records of provider calls, logs	Providing and improving the Services, security	Service providers	None
Professional information	Company and role, if you give them	Communications, understanding our users	Service providers	None
Inferences	Memory: how you like work done, and habits Leif notices across your threads	Personalizing Leif's answers	Service providers, including our AI model providers	None
Audio, electronic, visual or similar information; content	Your Content, feedback, communications with us	Providing the Services; reviewing threads while "Help improve Leif" is on; support	Service providers, including our AI model provider; data providers Leif queries for you; the public, for Published Links	None

We collect these categories from the sources and use them for the purposes described in this policy, and keep them for the periods in How long we keep personal information.

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.

Notice to European users

This section applies to individuals in the European Economic Area, the United Kingdom and Switzerland ("Europe"). "Personal information" in this policy means "personal data" as defined in the EU GDPR, the UK GDPR and the Swiss Federal Act on Data Protection (together, "European data protection law").

Controller. Thorn Street, Inc. is the controller of the personal information this policy covers. See How to contact us above.

Representatives. We do not currently offer the Services to people in Europe, so we have not appointed a representative in the EU or the UK under Article 27 of the GDPR. If we begin to, we will appoint them and list them here.

Legal bases. We rely on the following legal bases:

Purpose	Legal basis
Providing the Services, including running Leif's AI on Your Content, Published Links, billing and support	Performance of our contract with you
Reviewing your threads while "Help improve Leif" is on	Our legitimate interest in finding and fixing problems and improving Leif; you can object at any time by turning the setting off
Understanding and improving the Services using usage and aggregated data	Our legitimate interest in providing and improving the Services
Security, fraud and abuse prevention	Our legitimate interest in protecting the Services, our users and others; compliance with law
Communications about your account and the Services	Performance of our contract with you; our legitimate interests
Marketing communications	Our legitimate interests, or your consent where the law requires it
Compliance and legal claims	Compliance with law; our legitimate interest in establishing and defending legal claims
Anything else we ask your consent for	Consent, which you may withdraw at any time

Your rights. You may ask us to give you access to your personal information, correct it, delete it, transfer a machine-readable copy of it to you or a third party, or restrict its processing. You may object to processing based on our legitimate interests, and to direct marketing at any time. Where we rely on your consent, you may withdraw it at any time, without affecting processing before then. To make a request, email privacy@thornstreet.com. You may also complain to the data protection authority where you live or work: in the UK, the Information Commissioner's Office (https://ico.org.uk); in the EEA, your national authority (https://edpb.europa.eu/about-edpb/about-edpb/members_en); in Switzerland, the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).

Transfers out of Europe. We are based in the United States, so your personal information is processed there. Where European data protection law requires it, we rely on safeguards for these transfers, such as the European Commission's standard contractual clauses (and the UK and Swiss equivalents), or on the EU-U.S. Data Privacy Framework where a recipient takes part in it. You may ask us for a copy of the safeguards we use by emailing privacy@thornstreet.com.

Sensitive information. Please do not give us special categories of personal data, such as information about health, racial or ethnic origin, political opinions, religion, biometrics or sexual orientation. If you do, for example by telling Leif about a health need, we process it only to provide the Services you asked for and, while "Help improve Leif" is on, for our staff's review of your threads, relying on your explicit consent, which you can withdraw at any time with the controls in Sensitive information above.