Privacy Policy

At Thesis, Inc. (collectively referred to as "Thesis", "we", "us" or "our"), we respect your privacy and are committed to protecting it. This notice covers all personal information collected in the use of our website. If our privacy practices differ from those explained in this policy, we will let you know at the time we ask for or collect your information.

Some pages on our websites may contain links to third-party websites. We do not endorse and have no control over the privacy practices or content of such websites. We recommend you carefully read the privacy policy of each site you visit, including ours.

We cover a lot of ground in this privacy policy. Use the links below to navigate to later sections of the privacy policy of interest to you.

• Controller
• What Information We Collect
• Children's Data
• How We Collect Your Information
• Cookies and Automatic Data Collection Technologies
• How We Use Your Personal Information
• Disclosure of Your Personal Information
• Third-Party Links
• Retention
• Your Rights and Choices
• International Transfers
• Data Security
• Your California Privacy Rights
• Changes to Our Privacy Policy
• Contact Us

#Controller

Thesis is the controller and responsible for your personal data. We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the data privacy manager using the details set forth below.

#What Information We Collect

Personal information, or personal data, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data), which we can use for any purpose. We may collect different kinds of personal information about you which we have grouped together as follows:

• Identity or Contact information includes your name, email address, Internet Protocol (IP) address or similar identifiers (username, alias, or Discord ID) or other contact information.
• Communication Information includes information you provide to us for technical support and feedback information.
• Employment Information includes your name, address, contact information, your work and educational background, achievements, and certifications.
• Device Information includes the device's hardware information, operating system, platform information, browser type, language information, browser plug-in types.
• Usage Information includes information about how you use our websites and our products and services.

We may also collect, use, and share aggregated data such as statistical or demographic data ("Aggregated Data") for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage information to calculate the percentage of users accessing our website. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

We collect special categories of sensitive personal data about you (this may include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data) as necessary and permitted by law or with your consent. For example, we may collect information about your race or ethnicity for government statistical reporting permitted by law.

#Children's Data

We do not target our websites to minors, and we do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on this website. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18 please contact us at [email protected].

#How We Collect Your Information

We use different methods to collect information from and about you including through:

• Direct interactions. You may give us information about you by communicating with us. This includes information you provide when you send us an email leave a post on our discord server.
• Third-party or publicly available sources. We may receive information about you from third parties, including, our affiliated companies, business partners, and service providers.

#Cookies and Automatic Data Collection Technologies

Our websites may use automatic data collection technologies to distinguish you from other website users. This helps us deliver a better and more personalized service when you browse our website. It also allows us to improve our websites by enabling us to:

• Estimate our audience size and usage patterns.
• Store your preferences so we may customize our websites according to your individual interests.
• Recognize you when you return to our website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. For information about managing browser settings to refuse cookies, see Your Rights and Choices.
• Web Beacons, Pixel Tags, Clear Gifs. Our website pages and emails may contain small transparent embedded images or objects known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count website page visitors or email readers, or to compile other similar statistics such as recording website content popularity or verifying system and server integrity. For information about managing web beacons, see Your Rights and Choices.

Most web browsers include a Do-Not-Track ("DNT") signal or similar mechanisms for your privacy preference. At this time, there is no technology standard for recognizing and implementing DNT signals has been finalized. Given the state of technology, we do not respond to DNT signals or any other mechanism that automatically communicates your preference not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

#How We Use Your Personal Information

If you provide personal information through the features on our website, we will only use your personal information as the law allows. Examples of activities for which we may collect information, the type of data we collect, and our lawful basis for collecting that data are listed below.

Purpose/Activity	Type of data	Lawful basis for processing
To notify you about changes to our terms or privacy policy	Identity or contact information	Necessary to comply with a legal obligation
To communicate with you about technical support and feedback	Identity or contact information Communication information	Necessary for our legitimate interests Necessary for our legitimate interests
To communicate with you about joining our team	Identity or contact information Communication information	Necessary for our legitimate interests Necessary for our legitimate interests
To manage and process your personal information to perform steps to enter into an employment relationship	Employment information	Necessary for performance of a contract with you
To process special categories of sensitive personal information disclosed in your employment information	Employment information	Consent
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(a) Identity or contact information (b) Communication information (c) Usage information	(a) Necessary for our legitimate interests (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests

In addition, we may use your personal information for the following purposes:

• To carry out our obligations and enforce our rights.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

We may use information that is not personal information for any purpose. For example, we may aggregate Usage information from many people in a way that does not identify any individuals to calculate the percentage of users accessing a feature on the website.

#Disclosure of Your Personal Information

We may share non-personal information without restriction. We may share your personal information with:

• Any member of our corporate group, which means our subsidiaries, affiliates, our ultimate holding company and its subsidiaries, and affiliates.
• To contractors, service providers, and other third parties we use to support our business.
• To fulfill the purpose for which you provide it.
• For any other purposes that we disclose when you provide the information.
• With your consent.

We may also disclose your personal information:

• To perform background screening for candidates with conditional offers of employment.
• To comply with any court order, law, or legal process, including responding to any government or regulatory request.
• To protect the rights, property, or safety of our business, our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of cybersecurity, fraud protection and credit risk reduction.
• To investigate suspected violations of any law, rule or regulation, or the terms or policies for our website.

#Third-Party Links

Our websites may contain links to other sites, which we do not control. Those websites have their own privacy policies and terms, and we encourage you to read those terms before interacting with third-party sites.

#Retention

We will take reasonable steps to avoid collecting personal information that is not necessary. We will only retain your personal information for the period necessary to achieve purposes described in this privacy policy. Your express agreement may permit us to retain your personal information for a longer period. Furthermore, legal requirements may require us to retain portions or all of the personal information we hold for a longer period of time. When we are no longer required to retain your personal information, we will delete, erase, or de-identify your personal information as required by applicable law.

#Your Rights and Choices

Your rights may vary depending on where you are located. We have created mechanisms to provide you with the following control over your information.

• Accessing, Updating and Deleting Your Information. You can contact us at [email protected] to request access to, correction of, or deletion of personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or negatively affect the information's accuracy.
• Cookies and Automatic Data Collection Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
• California Residents. If you are a California resident, you may have additional personal rights and choices to your personal information. Please see Your California Privacy Rights for more information. California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. At this time, we do not engage in this type of disclosure.
• EU Residents. If you are a resident of the European Union, you have the right to:
  • request access to your personal data, commonly known as a "data subject access request", which allows you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request a correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
    • If you want us to establish the data's accuracy.
    • Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
    • You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
  • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
  • We may make automated decisions about you based on your personal information that may affect your access or services provided to you. You have the right not to be subject the automated decision making so long as the decision is not necessary for the performance of the contract with you or required by legal obligation. If the decision making is necessary, you may contest the decision and request human intervention in the decision-making process.
  • You also have a right to lodge a complaint with the relevant Data Protection Authority.

#International Transfers

Thesis is a global company, and we maintain the information collected and generated in the United States that may have privacy laws that offer different levels of protection from the privacy laws of where you live. If you visit our site or communicate with us, you consent to our collection, transfer, processing and use of your personal information in the United States. We will ensure that your personal information is adequately protected by this policy and the relevant legal and regulatory requirements.

If you are located in the EEA, we have put in place appropriate measures to comply with the laws and regulations to ensure that the transfer of personal data from the EEA to countries outside of the EEA provides an adequate level of data protection.

#Data Security

The security of your personal information is very important to us. We use physical, electronic, and administrative safeguards designed to protect your personal information from loss, misuse and unauthorized access, use, alteration or disclosure. We will only retain your personal information for as long as reasonably necessary to fulfill the purpose of collecting it.

We also require our service providers and business partners to whom we disclose the information to do the same. When you use certain types of information, such as debit or credit card numbers, we encrypt the transmission of that information using secure socket layer technology (SSL). However, the Internet environment is not 100% secure, and we cannot guarantee that information we collect will never be accessed in an unauthorized way.

The safety and security of your information also depend on you. You are responsible for keeping your personal information confidential. We urge you to take care when providing information to social media accounts or discord servers, which any other visitors can view.

#Your California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, you can view our Privacy Notice for California Residents.

#Changes to Our Privacy Policy

We will post any changes we may make to our privacy policy on this page. If the changes materially alter how we use or treat your information, we will notify you through a notice on the website home page. The date the privacy policy was last revised is identified at the top of the page.

#Contact Us

If you have any comments or questions about our privacy policy, please contact our data privacy manager at [email protected].