Privacy Policy

1. The short version

• You can use Nameboard's core search without an account. We use a random anonymous identifier stored in your browser to keep your session together.
• Some features (saving results, emailing your shortlist, full results, purchases) require you to give us an email address.
• We store the searches you run, the names we generate, and domain-availability results, so we can show, save, and email your shortlist.
• To generate names, we send the text you type to AI model providers (OpenAI and Anthropic). To check domains, we query a domain-availability provider (Fastly) and public domain registries.
• We do not sell your personal information. We do not share it with advertisers to target you.
• When you start using Nameboard you opt in to occasional product and productivity email from Thesis Labs, LLC about Nameboard and related products. Every message has a one-click unsubscribe, and you can opt out at any time.
• You have rights over your data (access, deletion, and more). See §9.

2. Information we collect

a) Information you give us directly

• What you type into a search — your name ideas, keywords, and the free-text description of your business, audience, and what makes it different. Please don't include sensitive personal information or confidential third-party data in this field; you control what you type.
• Your email address, when you provide it to save or receive results, create an account, or make a purchase.
• Optional profile details, if you choose to give them — for example a high-level description of your role (e.g. “founder”) and what stage your project is at. These fields are optional and used to understand and improve the product.
• Marketing-consent record — that you opted in to product and productivity email by using Nameboard, when, the source of that consent, and any later opt-out.

b) Information created when you use Nameboard

• The generated name candidates and their rationale, phonetic notes, and quality scores.
• The domains we checked for you and their availability status, confidence, source, and pricing signals.
• Saved names, boards you create or share, and votes cast on public boards (recorded against an anonymous voter fingerprint, not your identity).
• Outbound registrar clicks— when you click a “check at registrar / buy” link, we record which domain and link was clicked so we can understand which results are useful and reconcile any affiliate referrals.

c) Payment information

When you buy a paid product (a pass or upgrade as described at the point of purchase, including legacy purchases such as the Studio Pass), payment is processed by Stripe. We receive a Stripe customer/checkout reference, the product purchased, the amount, the status, and the email used. We do not receive or store your full card number — Stripe handles card data directly.

d) Technical information

• A random anonymous identifier(“anonymous ID”) stored in your browser's local storage / a cookie, used to group your searches and apply fair-use limits. It is not your name and is not, by itself, linked to your identity unless you provide an email.
• Standard server and security logs and error-monitoring data (e.g. via Sentry), which can include your IP address, browser type, pages requested, and technical context about errors. We use this to keep the service running, secure, and debuggable.

We do not run third-party advertising or behavioral-ad trackers on Nameboard.

3. How we use your information

We use the information above to:

• Provide the service — run your searches, generate names, check domains, save and display your shortlist, create and host boards.
• Email you your results / transactional messages — e.g. a link to your shortlist, purchase receipts, and account or security notices. These are not marketing and are sent because you used the product.
• Process payments and provide what you paid for.
• Prevent abuse and protect the service — apply fair-use and rate limits, detect automated scraping or attempts to exhaust our AI usage, and maintain security.
• Improve Nameboard — understand which features and result types are useful, debug problems, and develop new features and products. This may include analyzing search inputs and briefs in aggregate and to build and refine our own future products(for example, an AI brand-design product). Where this analysis uses identifiable data beyond what's needed to run the service, we rely on consent or our legitimate interest as described in §6, and we honor your objection and deletion rights.
• Send you marketing — only if you opted in (§5).

4. Who we share it with (our processors)

We don't sell your personal information and we don't share it with advertisers. We do use trusted third-party service providers (“processors”) who handle data on our behalf and under contract to provide the service. Disclosing your data to our own service providers under a contract that limits them to providing the service is not a “sale” under privacy law. The processors are:

About the AI providers: when we generate names we transmit the text you submit to OpenAI and/or Anthropic through their APIs. Under their applicable business/API terms, such inputs are processed to return a result and are not used to train their models, and are retained only for a limited period for abuse-monitoring before deletion.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and property of Nameboard, our users, or others. If Nameboard is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction; we'll require the recipient to honor this policy or notify you of material changes.

5. Marketing communications & your consent

By starting to use Nameboard you opt in to receiving occasional product and productivity email from Thesis Labs, LLC about Nameboard and related products we think are relevant to you. This is a soft opt-in tied to your use of the service, kept valid by a clear one-click opt-out in every message — and it is separate from the transactional messages below.

• Transactional messages (your results, receipts, security/account notices) are sent regardless of marketing consent because they're part of the service you requested.
• Every marketing email includes a one-click unsubscribe link, and unsubscribing is honored promptly. You can also email help@thesis.do to opt out.
• We record whether and when you consented and the source of that consent.

6. Legal bases (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, our legal bases under the GDPR / UK GDPR are:

• Performance of a contract — to provide the searches, results, and purchases you request.
• Legitimate interests — to secure the service, prevent abuse, understand usage in aggregate, and improve and develop our products, balanced against your rights.
• Consent / legitimate interests — for product and productivity email about Nameboard and related products (a soft opt-in tied to your use of the service), and for any use of identifiable personal data beyond providing and securing the service. You can withdraw it at any time — unsubscribe — without affecting prior processing.
• Legal obligation — where we must retain or disclose data to comply with the law (e.g. tax records for purchases).

7. International transfers

We are based in the United States and our processors may store and process data in the U.S. and other countries. Where we transfer personal data from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses (and the UK Addendum) with the relevant processors. You can contact us for more detail.

8. How long we keep it (retention)

We keep personal data only as long as needed for the purposes above, then delete or anonymize it. In summary:

• Searches, generated names, and domain results tied to an anonymous session are retained for a limited active window and then deleted or anonymized.
• Account and email records are kept while your account/list membership is active and for a reasonable period afterward.
• Purchase and tax records are kept as long as required by law.
• Security and error logs are kept for a short rolling period.

You can ask us to delete your data sooner (§9).

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and get a copy.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Port your data to another service.
• Withdraw consent at any time (e.g. unsubscribe from marketing).

California (CCPA/CPRA):you have the right to know, delete, and correct personal information, and to opt out of “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined, and we do not use it for cross-context behavioral advertising. We will not discriminate against you for exercising your rights. We also honor Global Privacy Control (GPC) signals from your browser as a valid opt-out request. At or before the point we collect your data, we provide a Notice at Collection describing the categories we collect, the purposes, and how long we keep them — summarized in §2, §3, and §8 of this policy.

To exercise any right, email help@thesis.do. We will verify your request (typically by confirming control of the email associated with your data) and respond within the timeframe required by law. Because much of our data is keyed to an anonymous browser identifier, deleting your browser storage or telling us your anonymous ID may be necessary for us to locate session data not tied to an email.

10. Children

Nameboard is not directed to children and is intended for users 16 and older. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact help@thesis.do and we'll delete it.

11. Security

We use reputable infrastructure providers, encryption in transit, access controls, and database-level row security. No method of transmission or storage is perfectly secure, but we work to protect your data and to limit what we collect in the first place.

12. Changes to this policy

We may update this policy. If we make material changes, we'll update the “Last updated” date and, where appropriate, notify you. Continued use after changes means you accept the updated policy.

13. Contact

Questions or requests: email help@thesis.do.