Privacy Policy

1. Introduction and Scope

Welcome to Thinking Code AI (“we,” “our,” or “us”). At Thinking Code AI, we provide product engineering, platform modernization, and US TPA, Insurance, Healthcare and other regulated domains. We are committed to maintaining the highest standards of data protection, transparency, and security.

This Privacy Policy explains how we collect, use, process, and disclose your personal data when you visit our website (https://www.thinkingcode.ai/), communicate with us, or engage our services.

Note regarding our role as a Data Processor: When we provide our engineering and AI deployment services to our enterprise clients, we often process data (including highly regulated data like PHI and PII) on their behalf. In these instances, we act strictly as a Data Processor (or Business Associate), and our processing activities are governed by specific Data Processing Agreements (DPAs) or Business Associate Agreements (BAAs) signed with our clients, which supersede this policy.

2. Information We Collect

We collect information about you in the following ways:

• Information you provide to us directly: When you book a demo, request templates (e.g., our Operational AI Field Manual), or email us at hello@thinkingcode.ai, we collect your name, business email address, company name, and details regarding your project or inquiry.
• Information collected automatically: Similar to modern web platforms, when you visit our site, we automatically collect technical information, including your IP address, browser type, device information, and interactions with our website. We use “cookies” and similar tracking technologies to ensure our website functions correctly and to analyze web traffic.
• Information related to business engagements: If you enter into a Discovery Sprint, Dedicated Pod, or Project Delivery engagement with us, we collect billing, administrative, and operational communication data necessary to fulfill our contract.

3. How We Use Your Information

We use the personal data we collect under the following legal bases and for the following purposes:

• To provide our Services (Contractual Necessity): To evaluate your systems, map workflows, and execute engineering sprints and deployments.
• To communicate with you (Legitimate Interest / Consent): To respond to your inquiries, schedule demos, send requested field notes or playbooks, and provide updates regarding our services.
• To ensure security and compliance (Legal Obligation / Legitimate Interest): To maintain the integrity of our website, enforce our Terms of Service, and implement security controls (such as RBAC and encryption tracking) to protect against unauthorized access.

4. Data Sharing and Sub-processors

We do not sell your personal data. We may share your data only in the following circumstances:

• Trusted Service Providers (Sub-processors): We engage third-party hosting, analytics, and secure communication providers to help operate our business. These parties are bound by strict confidentiality obligations and technical safeguard requirements.
• Legal & Compliance Requirements: We may disclose data if required by law, regulation, or legal process, or to protect the rights, property, and safety of Thinking Code AI, our clients, or the public.

5. Security & Data Protection

Because we specialize in US TPA and Insurance workflows, security is our baseline. We implement robust, industry-standard organizational and technical measures, including:

• Encryption of data in transit and at rest.
• Role-Based Access Control (RBAC) and least-privilege principles.
• Secure-by-default patterns tailored to handle PHI/PII responsibly (minimize, redact, restrict).

While no internet transmission is 100% secure, our infrastructure is built to support regulated operations and audit trails.

6. International Data Transfers

While our focus is on US-based TPA and Insurance teams, if personal data is transferred internationally, we ensure compliance with applicable data protection laws by utilizing recognized contractual frameworks (such as Standard Contractual Clauses) to safeguard your information.

7. Your Data Privacy Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal data, as well as the right to opt-out of marketing communications. To exercise any of these rights, please contact us at hello@thinkingcode.ai.

8. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will post the updated policy on our website and update the “Last Updated” date.