Privacy Policy

thinc3 consulting LLC
Effective date: September 20, 2026

1. Who we are and what this policy covers

thinc3 consulting LLC (“thinc3,” “we,” “us,” or “our”) is a Texas advisory business providing the 3C Decision Sprint, Technical-Commercial Diligence, and Executive Intelligence Desk services.

This policy explains how we collect, use, disclose, retain, and protect personal information through thinc3.com, our automated Services & Fit Guide, inquiries, communications, and our advisory engagements. Personal information means information that identifies, relates to, or can reasonably be linked to an individual, including professional contact information.

Client confidentiality and any processing we perform on a client’s behalf are also governed by the applicable engagement, nondisclosure, or data-processing agreement. This policy does not replace those obligations or authorize uses prohibited by them.

2. Information we collect

Information you provide. This may include your name, business email, company, role, company website, telephone number if supplied, engagement preference, decision timing, and the business question or context you choose to share. We also collect correspondence, requests for illustrative materials, and information exchanged when scoping or delivering an engagement.

Website-guide interactions. When you use the Services & Fit Guide, information processed may include your submitted messages and service-button selections, relevant recent conversation, generated replies, and context extracted from the conversation, such as the decision, scope, timing, and type of support sought. Session and request identifiers and other technical records help maintain the interaction and handle errors or misuse. Website and infrastructure providers may also process browser, connection, IP-address, and diagnostic information. Do not include information about yourself or other people beyond what is needed for a high-level service question.

Engagement and administration records. Where relevant, we process personal information in client-supplied documents, interview notes, authorized stakeholder information, contracts, invoices, billing contacts, and payment-status records. Payment providers may process additional information necessary to complete a payment. Do not send full payment-card details or account credentials through public inquiry channels.

Information from other sources. We may receive relevant professional information from your organization, an authorized referrer, client-designated contacts, public professional profiles, company websites, and other lawful business-research sources.

Technical and usage information. Our website and service providers may collect IP addresses, browser and device information, operating system, referring pages, pages accessed, timestamps, cookie or session identifiers, and security or diagnostic information. This information may be personal information when it can be linked to an individual.

Please provide only information relevant to your request and that you are authorized to share. Public forms and website guides are not intended for confidential, export-controlled, privileged, regulated, or other sensitive material. Agree appropriate handling arrangements with us before sharing detailed client materials.

3. Why we use personal information

We use information as reasonably necessary to:

Respond to inquiries, provide requested materials, and arrange scoping discussions.
Operate the Services & Fit Guide, explain engagement formats, suggest a preliminary service fit, and direct visitors to relevant pages or a separate inquiry channel.
Evaluate engagement fit, timing, scope, availability, and potential conflicts.
Prepare proposals and agreements, deliver agreed services, and communicate with authorized client representatives.
Administer billing, payment records, and business relationships.
Operate, secure, troubleshoot, and improve the website and service workflows, including permitted usage analysis.
Send communications you request or separately subscribe to; maintain communication and privacy preferences.
Meet legal and contractual obligations, resolve disputes, and protect rights and security.

Using the website guide, requesting a case example, submitting an inquiry, or becoming a client does not automatically subscribe you to a newsletter or unrelated promotional campaign.

Where applicable law requires a legal basis, we rely on the basis appropriate to the activity: taking requested steps toward or performing a contract with you; legitimate business interests such as responding to professional inquiries and securing our services, where permitted; legal obligations; or consent where required. Where we rely on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

4. How we disclose information

Service providers. We use Wix for website hosting and related website functions. The Services & Fit Guide uses an application backend hosted on Heroku and OpenAI’s application programming interface (API) for AI-generated responses and automated response checks. Other providers may support communications, scheduling, document storage, invoicing, payments, security, and approved research or analysis. We disclose relevant information needed for these services, subject to applicable contractual and legal requirements. Different providers receive information according to their function; use of Wix for the website does not mean that every chat message is processed by a Wix application backend.

Authorized engagement participants. We may disclose relevant information to client-designated recipients or approved specialists when needed for the agreed work and subject to appropriate confidentiality arrangements. We do not share inquiries with unrelated business partners for their own marketing.

Professional advisers and legal requirements. We may disclose information to legal, accounting, insurance, or other professional advisers, or when reasonably necessary to comply with law or valid legal process, address fraud or security incidents, or establish or defend legal rights.

Business transactions. Information may be disclosed in a proposed or completed merger, reorganization, or transfer of the business, subject to applicable law and appropriate confidentiality protections.

We do not sell or rent personal information, or share it for cross-context behavioral advertising—targeted advertising based on activity across unrelated websites or services. We do not publish identifiable client information or confidential engagement material in testimonials or case studies without appropriate written authorization.

5. AI-assisted advisory work and the Services & Fit Guide

AI-assisted advisory work

AI-assisted tools may support research, comparison, document analysis, modeling, and drafting within an agreed engagement. Final client deliverables and advisory recommendations remain subject to principal review. Before confidential client information is used with these tools, confidentiality and tool-use requirements are established for the engagement.

We do not use client confidential information to train general-purpose AI models or authorize an AI provider to use it for that purpose. Providers may nevertheless retain or process submitted information for service delivery, security, abuse prevention, or legal compliance under their applicable terms and settings. AI-assisted processing should not be understood to mean anonymous processing or zero retention.

Automated Services & Fit Guide

Purpose. The optional thinc3 Services & Fit Guide explains our services, answers questions about engagement formats, and helps identify a possible service fit. It may ask limited questions about the decision and support you are seeking. It does not assess your business, provide consulting recommendations, perform a formal fit or conflict review, accept an engagement, or book a call.

Information processing. For AI-generated replies, your submitted message, relevant recent conversation, and context derived from the interaction are processed through our application backend on Heroku and OpenAI’s API. These inputs are used to prepare a response and perform an automated check of the proposed answer. Some service-information buttons and greetings use predefined responses without an AI request. Messages can contain personal information even when the guide does not ask for your name or email.

Automated replies. Chat replies are automated, may be incomplete or inaccurate, and are not individually reviewed by Naren Yellai, thinc3’s principal, before display. An automated answer check is not human or principal review. A suggested service fit is preliminary and is not a consulting recommendation, completed conflict review, engagement acceptance, or binding quote. Using the guide does not itself establish an advisory engagement or a nondisclosure agreement.

Storage and reset. Where supported by your browser, the guide uses session storage to retain the displayed conversation and session information. Its application backend also temporarily holds recent conversation and interaction state in memory. These are separate from hosting, diagnostic, or AI-provider records.

Selecting New session resets this tab’s displayed conversation and starts fresh context for subsequent messages; it does not submit a request to delete records held by the backend or providers. Closing the guide or clearing browser storage likewise does not guarantee deletion from other systems. Provider retention may apply even when the AI request disables optional response storage. The retention and privacy-request sections of this policy also apply to guide interactions.

Contacting thinc3. Discuss a Decision opens the website inquiry page, and the email option opens your email application addressed to contact@thinc3.com. These links do not automatically attach, prefill, or send the chat conversation. To request personal follow-up, separately submit the inquiry form or send an email. Do not assume that chatting has notified Naren or created an inquiry.

Sensitive information and optional use. Share only non-confidential information. Do not submit proprietary technical details, export-controlled information, legally privileged material, credentials, financial-account details, or other sensitive information through the guide. Agree appropriate handling arrangements before exchanging detailed engagement materials. You may contact thinc3 without using the guide. Using it does not automatically subscribe you to marketing communications.

6. Cookies and similar technologies

The website may use cookies and browser storage to support security, core functionality, preferences, and, where enabled, usage analysis. The technologies present depend on the website features and integrations in use.

Where consent is required, we obtain it before using optional technologies. You can manage available choices through the website’s cookie controls and can block or delete cookies through your browser. Blocking essential technologies may affect forms or other functions. Clearing cookies may also reset previously saved preferences.

We process applicable opt-out preference signals where required by law. Such signals do not necessarily disable essential security functions or processing needed to respond to a request you make.

7. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

Retention depends on the record and purpose. Inquiry records support the request and relevant follow-up; engagement records support service delivery, contractual obligations, and appropriate business records; financial records support accounting and tax requirements; website-guide conversation and session state support the interaction; and technical records support security and troubleshooting.

Browser session storage, temporary backend memory, and hosting or AI-provider records have different retention arrangements. Session expiry and the New session control should not be understood as immediate deletion from every system. Limited records may also be needed to document privacy requests, communication preferences, conflicts, or legal claims.

When information is no longer needed, we delete it or appropriately deidentify it. Backup copies and provider-maintained records may follow different retention cycles or legal requirements. We address applicable deletion requests with service providers where required. We do not promise immediate deletion from every backup or provider system.

8. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and its use, including limiting access to those who need it for authorized purposes.

No website, transmission method, or storage system can be guaranteed completely secure. If a security incident triggers notification obligations, we will provide the notices required by applicable law.

9. Your choices and privacy requests

You can ask about our handling of your information, request correction or deletion, or ask us to stop optional promotional communications by contacting contact@thinc3.com. Where messages include an unsubscribe option, you may use it. Necessary engagement, transaction, and legal communications may continue.

Depending on your location, the context, and the law that applies, you may have rights to access or obtain a portable copy of your personal information; correct or delete it; restrict or object to certain processing; withdraw consent; or opt out of a sale, targeted advertising, or certain profiling, where relevant. These rights may be subject to exceptions.

We may request information reasonably necessary to verify your identity and authority before responding. Authorized agents may submit requests where permitted by law. We respond within applicable legal timeframes and will explain a refusal or limitation when required.

If a request is declined, you may ask for review by emailing contact@thinc3.com with the subject “Privacy Request Appeal.” We will consider the request and explain the outcome. Where applicable, you may also complain to the relevant privacy regulator or state attorney general. We do not discriminate against individuals for exercising applicable privacy rights.

Where we hold information solely on behalf of a client, we may coordinate with or direct your request to that client, consistent with our obligations.

10. International processing

thinc3 is based in the United States. Our service providers may process information in the United States or other countries, where privacy laws may differ from those in your location. Where applicable law requires safeguards for an international transfer, we use the required safeguards. Contact us for information about transfer arrangements relevant to your information or engagement.

11. Children and external websites

Our website and services are intended for business professionals, not children. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information, so we can investigate and take appropriate steps.

The website may link to external sites, including professional profiles and third-party resources. Those sites have their own privacy practices. This policy does not govern information you provide directly to those independent services.

12. Changes and contact

We may update this policy to reflect changes in our practices or legal requirements. The effective date will identify the version in effect. Where required, we will provide additional notice or obtain consent before a material change applies.

Privacy questions, requests, and appeals:

Email: contact@thinc3.com

This policy explains our information practices. It is not a request for blanket consent; separate choices or consent will be provided where required.