Privacy Policy
This policy explains what data Superthesis collects, why, who it's shared with, and the choices you have. We try to collect as little as the product needs to work.
1. Who we are
Superthesis ("Superthesis", "we", "us") operates the website at superthesis.ai and the Superthesis application — an engine that turns a claim into a calibrated, source-cited verdict through an adversarial AI debate. For any privacy question, contact us at privacy@superthesis.ai.
2. What we collect
Information you provide
- Email address — used for passwordless ("magic link") sign-in and to send you service-related messages.
- Profile details — an optional display name, handle, and bio if you choose to add them.
- Content you submit — the claims, questions, context, and documents you send to the engine, and any forecasts or resolutions you record.
Information collected automatically
- Session data — a sign-in cookie that keeps you logged in. It is essential to the service; we do not use advertising or cross-site tracking cookies.
- Basic technical data — IP address and request metadata, used transiently for rate-limiting, abuse prevention, and operational logging.
3. How we use it
- To authenticate you and keep your session active.
- To run the debate engine on the claims you submit and return a verdict.
- To store your runs and history so you can return to them in your workspace.
- To protect the service (rate-limiting, fraud and abuse prevention).
- To send transactional messages (e.g. login links). We do not send marketing email without your consent.
4. Sub-processors and third parties
To operate the service, the content you submit is shared with infrastructure and AI providers that process it on our behalf:
- AI model providers (e.g. Anthropic) — your claims and supporting context are sent to large-language-model APIs to generate the debate and verdict.
- Search / retrieval providers — queries derived from your claim may be sent to web-search and retrieval services to gather evidence.
- Hosting — our application and database are hosted by our cloud infrastructure provider.
These providers are bound to use the data only to deliver their service to us. We do not sell your personal information, and we do not share it for third-party advertising.
5. Data retention
We keep your account information for as long as your account is active. Your submitted claims and run history are retained in your workspace until you delete them or close your account. Expired login tokens and transient technical logs are purged on a rolling basis. You can delete individual runs at any time, and you can ask us to delete your account and associated data.
6. Your choices and rights
- Access & portability — request a copy of the data associated with your account.
- Correction — update your profile details at any time.
- Deletion — delete individual runs in-app, or request full account deletion.
- Withdraw consent — stop using the service and request deletion at any time.
Depending on where you live (e.g. the EEA, UK, or California), you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, email privacy@superthesis.ai.
7. Security
We use industry-standard measures to protect your data, including encrypted transport (HTTPS) and encryption of sensitive stored secrets. No system is perfectly secure, but we work to limit what we collect and to protect what we hold.
8. Children
Superthesis is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.
9. Changes to this policy
We may update this policy as the product evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.
10. Contact
Questions or requests: privacy@superthesis.ai.