Privacy

The short version

• We do not sell your information or use it for advertising. We use it to run the service: to teach you, schedule your reviews, keep your allowance and take payments.
• What we keep: your email address, a scrambled form of your password, and what you do here, such as your lessons, answers, reviews and settings.
• Where it is stored: DigitalOcean's data centers in New York, in the United States.
• The AI provider: what you send the tutor goes to Anthropic Claude, which writes its replies. It is not sent your email address, password or payment details. Anthropic's commercial terms say it may not train its models on what this site sends it.
• Web research: to plan a lesson, the tutor may search the web about your topic. Anthropic runs the searches, with words its AI picks from what you wrote for the lesson.
• Dictation, where your browser offers it, turns your voice into text on your device. Your voice is not sent to anyone.
• Payments go through Stripe, so your card number never reaches this site.
• In your browser, the site sets one sign-in cookie, and our hosting provider's network may set a short-lived security cookie. There are no analytics or tracking scripts on the site.
• Our emails are sent by Brevo, which records when each one is opened and may count clicks on its links. We do not use those records.
• Your choice: download what you have learned, or delete your account, from Settings at any time.

Who is responsible

James Perrotta runs Thought Pantheon and decides how your information is used. To ask about your information, email help@thoughtpantheon.com.

What we keep, and why

Your account

• Your email address, to sign you in and to send the emails that confirm your address or let you choose your password. Once it is confirmed, we also tell it when your password or address changes, or your account is deleted, in case someone else did it. It also matches your payments to your account.
• Your password, stored only as an Argon2 hash. A hash cannot be turned back into the password. Nobody here ever sees it or chooses it for you.
• When the account was made, when it was last used, and whether its address is confirmed.
• If we make your account for you, at your request, we keep a short note of who it is for. Only the operator sees it. Nobody can sign in until you choose a password from the link we email you. You agree to the terms then.

What you learn

• Your topics, lessons and the conversations in them, your answers, marks, review history, plans and settings, including your time zone.
• After web research for a plan, the lesson keeps what the searches found: the pages' addresses and titles, and short notes on what they say.
• We keep these to teach you and to schedule your reviews. They are the service itself.

Your allowance and payments

• AI usage records. For each AI request, they say which kind of step it was, the model, how much text went in and out, and its cost. They hold no questions or answers. We keep them to show your allowance, to stop spending past it, and for the business's accounts.
• Payment records. Stripe tells us the amount, date and status of each payment, refund or dispute, with a customer reference. Your card number goes only to Stripe, never to this site.

Keeping the service safe

• Your network address (IP address) is used to limit how often sign-ins, sign-ups and emails can be tried. Most counts are kept in the server's memory. The ones kept in the database are stored under a keyed hash, and deleted after two days.
• A keyed hash of your email address is kept after your account is deleted, so that the same mailbox cannot take a second free trial.
• If an account is deleted while a payment dispute is open, a keyed hash of its address is kept too. It is removed when that address signs up and tries to buy again.
• Server logs record each request: the time, the address of the page asked for and the result, and they may include a network address. We use them to find and fix faults.

A keyed hash is made with a secret key, so a copy of the database cannot be checked against a list of addresses. It is not anonymous: with the key, it still relates to you.

In your browser

• Cookies: one sign-in cookie, and possibly a short-lived security cookie from our hosting provider's network. Cookies names them and says how long they last.
• Session storage: while you use the app, the tab keeps a few notes for itself. They include drafts of answers you type or dictate, and the page you were heading to before signing in. They also note whether you hid the reminder to confirm your email. The browser deletes them when you close the tab.
• Dictation: where your browser can turn speech into text on your own device, a microphone button appears beside the box. Your voice is turned into text on your device. It is not sent to this site, to Anthropic Claude or to anyone else. Only the words you then send are.
• Speech files: the first time you dictate, your browser may download speech files once, from its maker (Google for Chrome, Microsoft for Edge). That download is between your browser and its maker.

Nothing else is kept in your browser by this site, and the site loads nothing from other websites.

Who else handles it

These companies handle information for us, only to provide the service:

Stripe and the AI provider also act under their own terms and privacy policies. About the AI says what the AI provider keeps.

About web research. To plan a lesson, the tutor may first search the web about your topic. Anthropic runs the searches. Its AI picks the search words from your topic, your goal, what you said you know and your answers to the starting questions. Those reach Anthropic shortened, and nothing else about you goes into the searches. The plan then links the pages its ideas rest on.

About our emails. Brevo adds a tiny image to each email it sends for us. When your email app loads it, Brevo records that the email was opened, when, and from which network address. Brevo may also send the links in an email through its own address, to count clicks. We do not use these records. We only email you when you sign up, ask for an email, or need to know about your account.

Where it is stored

The site and its database run in DigitalOcean's data centers in New York, in the United States.

How long we keep it

• While you have an account, we keep what you have learned, so you can come back to it.
• When you delete your account, your email address, password hash, lessons, answers, reviews, settings and sign-ins are deleted straight away.
• What stays after that: the payment and AI usage records, under an account number with no email address or content. They are the business's accounts. Also the keyed hashes described above, and a note that the account number was deleted.
• Backups. DigitalOcean keeps daily backups of the database for 7 days, so a deleted account can remain in a backup for up to 7 days. We may also keep our own backup copies to recover from a disaster. If we ever restore one, accounts deleted since it was made are deleted again at once.
• Accounts nobody confirms. An account whose address is never confirmed, and that nobody uses, is deleted after 14 days. If an emailed link to it still works then, it waits for the link to stop. One that holds lessons is deleted after a year without use.
• Sign-ins end 30 days after you last used the site, and are then deleted.
• Email links stop working after an hour (a password reset), 3 days (confirming an address) or 7 days (choosing your first password). They are deleted soon after.
• Copies of paid AI replies are kept for up to a day.

Who can see your information

• You, whenever you are signed in.
• The operator. The operator's dashboard shows accounts, payments and AI costs, not lessons or answers. From it, the operator can also change an account's address, sign it out or delete it, but never sees or sets a password. The operator can reach the database itself, which does hold your lessons and answers. We open an account's lessons only at your request, or when we must to keep the service working or to obey the law.
• The companies above, for what they do for us.
• Nobody else, unless the law requires it.

What you can do

• Download it. Settings downloads a backup of everything you have learned. Each topic page downloads its notes.
• Bring it back. Settings imports a backup, adding to your account.
• Change it. Settings changes your password. To change your email address, or to correct anything else, email help@thoughtpantheon.com.
• Delete it. Settings deletes your account, after you type your password. If you have a subscription, deleting the account ends it at Stripe first.
• Ask. Email help@thoughtpantheon.com to ask what we hold about you, to have it corrected, or to object to how we use it.

Depending on where you live, data-protection law may give you further rights. We will answer any request about your information that you send to that address.

Children

Thought Pantheon is for people who are 18 or over. If we learn that a child has an account, we close it and delete its information. If you think a child is using it, email help@thoughtpantheon.com.

Security

• Passwords are stored as Argon2 hashes, and sign-in sessions as hashes of random tokens.
• The site is served only over HTTPS.
• The database itself keeps each account's rows apart from every other account's.
• The AI's interactive pictures run in a sealed frame on a separate address, with no way to reach your account.

Changes to this notice

We will tell you about a change that affects you at least 30 days before it takes effect, by email or on this site. The date at the top says when it last changed.

Contact

Email help@thoughtpantheon.com with any question about your information.

Version history

• October 31, 2026: dictation, which your browser does on your device where it can, and the web research that may plan a lesson. Also accounts we make for you, and what the operator's dashboard can change.
• October 30, 2026: the short version now starts with what we do not do with your information, and says where it is stored. Nothing the notice describes changed.
• October 28, 2026: first version.