Privacy Policy

ThinkNot keeps what it needs to book your stay, front your deposit and honor the guarantee — and nothing beyond that. Your searches and locked decisions live in your browser's local storage, not in a ThinkNot database. There are no accounts today — every visitor uses a local session. Personal Scan sends the photos and files you pick to our backend once, for AI analysis, and then discards them — only the short written summary it produces is saved to your profile.

When you run a Stays search, ThinkNot saves the resulting decision — the city, your rules, and the stays it found — to localStorage on your device, so you can come back to it and so the 30-minute same-city lock works. This never leaves your browser and is never written to a server-side database we control. Clearing your browser storage clears it.

Personal Scan works differently: the photos and files you choose to select are sent to our backend so Anthropic's Claude API can look them over for travel-preference signals — destinations, accommodation style, budget cues. Those files are used once, for that single request, and are never written to a database or kept after the analysis finishes. Only the resulting summary — a few sentences and short bullet phrases, never the files themselves — is saved, and it's saved the same way as everything else: to localStorage on your device, not a ThinkNot database. You can delete it any time from your Account page.

To find real stays, the city, dates, budget, quality preference and rules you enter are sent to our backend, which uses Anthropic's Claude API (with web search) to locate and describe real, currently listed properties. That request is used only to generate your results — we don't build a profile from it or hand it to advertisers. A hotel catalog lookup may also go through a search provider (Google's Custom Search API, with a no-key fallback) using the same city/state, not anything about you personally.

Completing a booking means giving ThinkNot the payment and stay details needed to reserve the room and front the security deposit on your behalf — the same category of information any booking site collects. That information is handled by a payment processor and used only to complete your reservation, the deposit guarantee, and any dispute or refund tied to it. We don't sell it or use it for advertising.

If you upload service-animal documentation to your ThinkNot profile, it's used to vet you once so you don't have to re-justify it at check-in. Hotel partners see only that a booking is verified, not the underlying documents. You can ask us to delete this documentation at any time.

Account sign-in is being rolled out but is not enabled on every deployment yet. When it is off, everyone browses as a local, unauthenticated session and no personal profile is created. When it's on, sign-in is handled by a third-party identity provider, and we store only the name, email address and profile image it gives us — enough to show who's signed in, nothing more.

We use Vercel Speed Insights to see aggregate, anonymized page performance (how fast pages load) so we can keep the app fast. It isn't used to track you individually across sites.

ThinkNot is a young company actively building out the systems above — the deposit guarantee, dispute handling, payment processing and service-animal verification described in this policy are our current business model, and some of the underlying infrastructure is still being built. We'll update this page as each piece goes live, and we won't collect payment or verification data ahead of the systems that are meant to handle it responsibly.

If how we handle data changes materially, we'll update this page and the "Last updated" date above.