Privacy Policy

Who this covers

• Clients: people at consulting firms, investors and other organizations who request research or use the client portal.
• Experts: people we contact about a consultation, and people who complete onboarding or take part in a call.
• Visitors to thielos.com.

Signing in with Google or Microsoft

The client portal lets you sign in with your Google or Microsoft account, or with a one-time code sent to your email. When you sign in with Google or Microsoft, we receive your name, email address and profile picture from that provider.

We use this information only to confirm who you are, sign you in, and show you the requests your organization has shared with you. We do not request access to your email, files, calendar or contacts, and we do not post anything on your behalf.

We do not sell this information, use it for advertising, or use it to train AI models. We share it only with the service providers that run sign-in for us (see “Service providers” below).

Thielos’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information we collect

Depending on how you interact with us, we collect:

• Contact and account details: name, email address, phone number, employer and job title.
• Client research details: the questions, requirements and materials you share with us for a project.
• Expert professional information: work history, areas of expertise and public professional profiles. We collect this from publicly available sources and commercial data providers in order to find and contact people with relevant experience, and from what experts tell us during onboarding.
• Onboarding answers: written and recorded answers to screening questions, availability, hourly rate, and the agreements you accept.
• Payment details for experts, such as bank account information for ACH transfers or a mailing address for checks.
• Consultation records: with participants’ knowledge, calls may be recorded and transcribed, and the transcript provided to the client who requested the consultation.
• Usage information: pages visited, device and browser details, IP address, and how you use our sites. Our onboarding pages may record sessions to help us fix problems with the forms.

How we use information

• To run the service: match clients with experts, arrange and hold consultations, deliver transcripts, and pay experts.
• To contact experts about specific projects that fit their background.
• To sign people in, keep accounts secure, and prevent fraud and misuse.
• To check that consultations meet our compliance rules, for example that experts can take part and that calls stay within confidentiality limits.
• To operate, troubleshoot and improve our sites and service.
• To meet legal, tax and accounting obligations.

How we share information

We do not sell personal information. We share it only as follows:

• Between clients and experts, as needed to arrange a consultation. Client confidentiality terms prevent clients from attributing an expert’s comments to them by name or publishing them.
• With service providers that process information on our behalf under contract.
• When required by law, or to protect the rights, safety and security of Thielos, our users or others.
• As part of a merger, acquisition or sale of assets, subject to this policy.

Service providers

We use service providers for sign-in and identity (WorkOS, Google, Microsoft), email delivery, video calls, hosting, storage and security, website analytics, and payments. They may use the information only to provide their services to us.

Cookies

The client portal uses cookies to keep you signed in and to protect against cross-site request forgery. These are required for the portal to work. Our website uses analytics to understand how visitors use it.

Retention

We keep personal information for as long as we need it for the purposes above, including to meet legal, tax and accounting requirements, and then delete or de-identify it. Portal sign-in sessions expire after 30 days.

Your choices and rights

• You can ask us to access, correct or delete your personal information.
• Experts can ask us at any time to stop contacting them; we will record the request and stop.
• You can remove Thielos’s access to your Google or Microsoft account from that account’s security settings at any time.
• Depending on where you live, you may have additional rights under local law, such as the right to object to or restrict processing. We will not treat you differently for exercising them.

To make a request, email hello@thielos.com. We may need to confirm your identity before acting on it.

Security

We protect personal information with access controls, encryption in transit, and limits on who inside Thielos can see it. No system is perfectly secure, and we cannot guarantee absolute security.

International transfers

Thielos is based in the United States, and we and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for these transfers.

Children

Our services are for professionals and are not directed to anyone under 18. We do not knowingly collect information from children.

Changes to this policy

We may update this policy. When we do, we will change the date at the top of this page, and for significant changes we will give notice through our sites or by email.

Contact

Questions about this policy or your information: hello@thielos.com.