Thesora
PrivacyTerms

Thesora / Legal

Privacy Policy

Thesora respects your privacy. This page explains the basic information we collect and how we use it.

Effective date: September 23, 2026

On this page

  1. Information we collect
  2. Google Sign-In
  3. How we use your information
  4. Project information
  5. How we share information
  6. Third-party services
  7. Cookies and browser storage
  8. Data retention
  9. Security and data protection
  10. Your choices
  11. Changes to this policy
  12. Contact

Information we collect

When you use Thesora, we may collect and store information such as:

  • your name, email address, and profile information
  • password information in securely hashed form
  • Google account information when you use Google Sign-In
  • projects you create or join
  • team members and project roles
  • milestones, tasks, deliverables, and revisions
  • feedback, project resources, links, and activity

Google Sign-In

If you sign in with Google, Thesora may receive your Google account ID, verified email address, name, and profile image.

Using Google Sign-In does not give Thesora access to your Gmail, Google Drive files, or Google Calendar.

How we use your information

We use your information to operate and improve Thesora, including to:

  • authenticate your account
  • provide project and collaboration features
  • manage roles and permissions
  • maintain project history and activity
  • protect the service from misuse and unauthorized access

Project information

Information within a project may be visible to other project members depending on their role and permissions.

Be careful when inviting people to a project or sharing invitation links.

Thesora may store links to external services such as Google Docs, Google Drive, GitHub, or Figma, but does not copy the full contents of those resources.

How we share information

Thesora does not sell your personal information.

Information may be shared with service providers that help operate Thesora, such as hosting, database, authentication, and infrastructure providers, when necessary to provide the service.

We may also disclose information when required by law or when reasonably necessary to protect Thesora, its users, or others.

Third-party services

Thesora may use third-party services for hosting, authentication, infrastructure, or other functionality.

External links added to projects are governed by the privacy policies and terms of the services they point to.

Cookies and browser storage

Thesora uses essential cookies to securely maintain your signed-in session.

We may also use local browser storage for simple preferences, such as remembering whether you have dismissed the welcome tutorial.

We currently do not use advertising cookies.

Data retention

We retain account and project information for as long as reasonably needed to operate Thesora and maintain project history.

Archived projects may continue to retain their associated project information.

Thesora does not currently provide a fixed automatic data-retention period.

Security and data protection

Thesora uses reasonable security measures designed to protect user accounts and project data, including:

  • secure password hashing
  • server-side sessions with secure cookies
  • role-based and project-level access controls
  • input validation and request protection
  • rate limiting and abuse prevention where implemented
  • secure HTTPS communication

While we take reasonable steps to protect your information, no online service can guarantee complete security.

Your choices

You can update certain account and project information directly within Thesora.

If you have questions about your information or want to request a change or deletion that is not available in the app, you can contact us using the details below.

Changes to this policy

We may update this Privacy Policy as Thesora and its features change.

The latest version will always be available on this page.

Contact

Questions or privacy-related requests can be sent to: lsabornido97@gmail.com

Back to ThesoraTerms of Service