Thruline Privacy Policy

This Privacy Policy explains how Fixate Industries LLC, a Pennsylvania limited liability company doing business as Thruline (“Thruline,” “we,” “us”), collects, uses, and shares information when you use the Thruline service and website (the “Service”). Effective date: August 30, 2026.

1. Information We Collect.

We collect the following categories of information:

• (a) Account and identity — your email address and, depending on how you sign in, your login credentials or your GitHub or Google profile (such as username and avatar). If you connect GitHub, we store an access token, encrypted at rest.
• (b) Organization and billing — your team or organization details (such as members and roles) and your subscription information (plan, seats, renewal date, and Stripe identifiers). We do not receive or store payment-card data.
• (c) Repository and code analysis — repository metadata and the analysis we generate from your connected code, such as summaries, search indexes, review findings, and related metrics. We process your source code to produce this analysis but do not store the code itself.
• (d) Usage — records of how you use the Service, such as tool calls and AI usage counts.
• (e) Marketing — information you submit through beta signups, sales inquiries, and newsletter subscriptions.
• (f) Consent records — when you create an account or accept our terms, your IP address, a timestamp, document, document version, and user agent, which we retain as evidence of your agreement and for security.

What we do not collect. We do not store your full source code (it is processed in memory and then discarded) or payment-card data, and we do not use your IP address for general tracking — we retain it only transiently for rate-limiting and as part of the account and consent record described above.

Repository contributors. Our analysis of a connected repository may incidentally include limited information about its contributors (for example, a GitHub username on a pull-request comment), which we process on the connecting customer’s behalf. If you have a question about such information, please contact the organization that connected the repository, or us at [email protected].

2. How We Use Information.

We use information to index and analyze your connected repositories and provide the Service’s code-analysis, search, and review features; to operate, secure, support, and improve the Service; to process payments and manage subscriptions; to communicate with you about your account, transactions, and service updates; to send marketing where permitted (you can opt out); to detect and prevent fraud and abuse; and to comply with law.

3. How We Share Information.

We share information only as needed to run the Service:

• (a) Service providers (subprocessors), each receiving only the data it needs: Anthropic and Jina AI (AI analysis and embeddings — these receive source code and code-derived data); GitHub (repository access and authentication); Google (authentication for Google sign-in); Stripe (payment processing); Resend (transactional and marketing email); and Sentry (error monitoring and diagnostics);
• (b) Legal and safety recipients, when required by law or to protect rights, safety, and property; and
• (c) A successor, in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Payment Processing.

Payments are handled by Stripe. Your payment-card data is provided directly to Stripe and is governed by Stripe’s privacy policy. We receive only limited transaction and billing details necessary to manage your subscription.

5. Cookies.

We use cookies and similar technologies to keep you logged in, remember preferences, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.

6. Data Retention and Security.

We do not retain your source code (it is processed in memory and discarded). Your analysis and account records are retained while your subscription is active and for a reasonable period afterward, then deleted or de-identified, except as needed for legal or business purposes. Consent records (category (f) above) are a deliberate exception: we retain them indefinitely, including after an account is closed, because they are our evidence of which version of each document you agreed to and when. We use reasonable administrative, technical, and physical safeguards to protect information (including encryption of the GitHub access token at rest), but no method of transmission or storage is completely secure.

7. Your Choices and Rights.

You may access or update your account information in the Service and opt out of marketing emails. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. California residents have rights under the CCPA/CPRA (including to know, delete, and correct their personal information); as noted above, we do not sell personal information or share it for cross-context behavioral advertising. Residents of the EU/UK and certain U.S. states have similar rights. To exercise a right, contact us at [email protected]; we will respond as required by law and will not discriminate against you for exercising a right.

8. International Users.

We are based in the United States and process information there. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States, which may have different data-protection laws than your country.

9. Children’s Privacy.

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to This Policy.

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice.

11. Contact Us.

Questions about this Privacy Policy or your information: Fixate Industries LLC d/b/a Thruline, 219 Castlegate Rd., Pittsburgh, PA 15221-4415, email [email protected].