Privacy notice
What Themelior keeps about you, why, who else handles it and for how long, in plain words. Themelior is run by Edwin Jorge; write to hello@themelior.com with any question about your data.
Interim, last updated ; legal review pending.
What we keep, and why.
Only what the product needs to work. Each card is what our code stores today.
Every visit
Your IP address, browser and the page you asked for reach our host, Vercel, as they do for any website. We count visits and page speed with Vercel Web Analytics and Speed Insights (no cookies), and visits, the steps you take (a scan started, a report opened, a copy button pressed, an account created) and errors with PostHog (a cookie and browser storage on this domain, sent through our own address without our sign-in cookies). PostHog receives your IP address and browser to estimate your country, and the pages you visit without their query strings; none of it is linked to your account, and no session is recorded.
Kept: Vercel’s and PostHog’s retention settings apply; we have not changed them.
You scan a page
The URL you scan, its result, and a salted hash of your IP address, kept with the scan, that we never turn back into the address; it only limits scans per visitor. A scan your watchlist starts (adding a site, or “Scan now”) keeps your account id in its place, and one your agent starts with an API key keeps that key’s id. A signed-in visitor’s account id is stored with the scan for our usage counts and never shown.
Kept: A finished report is public by its link, never indexed, and kept for good unless the site’s verified owner unlists it; a failed scan for 30 days.
You create an account
Your name, your email and a hash of your password (never the password). With GitHub sign-in, what GitHub returns: your GitHub account id, avatar link and its sign-in tokens. Each session keeps the IP address and browser that started it, also written to our host’s logs; sign-in limits count attempts by IP address. We record that you signed up or signed in, with the method and time, and for a sign-up which link it started from (a report, “Watch this site”, pricing or other) and, if it started on a report, which report, so we can count the scans that lead to accounts; never your email or IP address; these records stay, without your account id, if the account is deleted.
Kept: Until the account is deleted; sessions 7 days after their last use; sign-in counters a day; sign-up and sign-in records for good, without the account id once it is deleted.
You watch or verify a site
The sites you watch and whether one is yours, its verification token, whether you want an email when its score drops (on until you turn it off), and when we last emailed you about it. For a verified site: up to 50 of its public pages, and an email to you, at most one a day, when a re-check misses its proof or the proof is removed. For your own site, verified or not: the questions real agents tried, their answers and the pages they fetched (each address up to its path, never its query), the model tokens each run used (stored with your account id, nothing else about you), and, if you connect one, the repository’s name and the pull requests we opened. No repository content is stored.
Kept: Until you remove the site or the account is deleted; what real agents did stays with the report it belongs to, without your account id once the account is deleted.
You create an API key
A hash of the key, its first characters so you can recognise it, its name and how often it is used.
Kept: Until you revoke it or the account is deleted.
You add your model key
Your own Anthropic API key, encrypted with a secret kept outside the database; we show only its last four characters, and when it was checked, last used or refused. It goes to Anthropic only to check it when you save it and with the model calls of your own runs.
Kept: Until you remove or replace it, or the account is deleted.
You join the waitlist
Your email (signed in, your account’s), the features you asked for, the page and when. We use it only to count who wants each feature; the address is not checked and we send nothing to it. PostHog receives each join with the feature and the page, never your email.
Kept: 12 months from when you join, then deleted; sooner if you ask, and with the account if you joined signed in.
Who else handles it.
The companies Themelior runs on, each only for its part.
| Company | What it does for us |
|---|---|
| Vercel | Hosts the site and its logs, firewall and visit counts |
| Neon | Holds the database above |
| Resend | Sends our emails: confirming your address, password resets, score-drop alerts and lost-proof emails for a verified site (US region) |
| PostHog | Counts visits, the steps people take and waitlist joins (never your email or your account), and records errors (US cloud): your IP address and browser |
| Anthropic | Its models read the pages of your own site for real agents, and of a verified site for agent builds. Never your name or email; if you add your own model key, it goes with the calls made for your runs, and once to check it when you save it |
| GitHub | Signs you in if you choose GitHub, and opens pull requests on the one repository you connect |
| Google Workspace | Receives what you write to hello@themelior.com or security@themelior.com |
What we do not do.
- We do not keep the raw IP address of anyone who scans; only a hash, and the exceptions named above for sign-in.
- We do not take payment details: nothing is charged.
- We do not record sessions or run advertising trackers.
Your choices.
Ask, and a person reads it
To see what we hold about you, to correct it, to delete your account, or to have a report about your site removed, write to hello@themelior.com. There is no button to delete an account yet, so Edwin Jorge does it by hand. Deleting an account removes its sites, keys and sessions; the reports it ran stay public, and its sign-up and sign-in records stay, both without the link to you.
This notice will change
It is interim: a lawyer has not reviewed it yet. When what we keep changes, this page changes with it and its date above moves.