Last Updated: October 2026
Your Data. Your Control. Our Responsibility.
ThatWare AI is committed to protecting the privacy, security, and integrity of the information entrusted to us.
This Privacy Policy explains how ThatWare AI, powered by ThatWare LLP (“ThatWare AI,” “ThatWare,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects information when you visit thatware.ai, create an account, use our platform, purchase a subscription, submit website or organizational information, or otherwise interact with our services.
Our approach is guided by three principles:
Collect only what is reasonably required.
Use information only for clear and legitimate purposes.
Give users appropriate transparency and control over their information.
1. Scope of This Privacy Policy
This Privacy Policy applies to information processed through:
- ThatWare.ai
- ThatWare AI user accounts and workspaces
- AI-readiness tools and reports
- Website-analysis functionality
- AVM and VEM tools
- GEO Readiness Score
- Entity Clarity and Entity Score
- AI Stack generation
- AI Intelligence Layer
- Brand Authority & Knowledge Registry
- Subscription and checkout processes
- Contact, support, and enterprise enquiry forms
- Communications relating to the ThatWare AI platform
This Policy does not govern the privacy practices of independent third-party websites, platforms, or services that you may access through links from ThatWare AI.
2. Who We Are
ThatWare AI is an AI Readiness, Visibility and Entity Intelligence Platform powered by ThatWare LLP.
The platform is designed to help organizations structure machine-readable information, generate AI-readiness assets, analyze entity clarity, measure AI visibility, evaluate generative-search readiness, and organize digital knowledge for intelligent discovery.
For applicable privacy and data-protection laws, the appropriate ThatWare entity may act as the data controller, data fiduciary, or service provider/processor, depending on the nature of the processing and the relationship with the user.
3. Information We May Collect
The information we collect depends on how you interact with ThatWare AI.
A. Account Information
When you create or manage an account, we may collect:
- Name
- Email address
- Login credentials or authentication records
- Email-verification information
- One-time-password verification records
- Account preferences
- Subscription status
- Workspace information
Passwords should be stored using appropriate security protections and should never be stored in readable form.
B. Organization and Brand Information
When configuring your AI-readiness profile, you may provide information such as:
- Brand name
- Legal business name
- Preferred display name
- Brand pronunciation
- Country
- Tagline
- Website URL
- Services and products
- Business specialization
- Organization descriptions
- Business contact information
Some of this information may relate to businesses rather than individuals, but it may still constitute personal data where it identifies or relates to a person.
C. Founder and Leadership Information
You may provide information relating to founders, executives, or other representatives, including:
- Name
- Role or designation
- Professional biography
- Public profile URL
- Areas of expertise
- Professional credentials
- Business contact details
You should only provide information you are authorized to submit.
4. Website and Knowledge Information
To provide AI-readiness functionality, users may submit or authorize ThatWare AI to analyze:
- Website URLs
- Public webpages
- Sitemaps
- About and Contact pages
- Service and product pages
- Knowledge bases
- Research materials
- Frameworks
- Publications
- FAQs
- Public leadership profiles
- Public digital profiles
- Authority sources
- Organization schemas
- Other publicly available business information
We may process this information to build reports, structured files, knowledge relationships, entity models, retrieval resources, and other platform outputs.
5. AI Knowledge Architecture Information
Depending on the features you use, you may provide:
- AI governance resources
- Priority discovery URLs
- Entity and brand signals
- Technology-stack information
- Authority signals
- Core concepts
- Business associations
- Knowledge-source URLs
- Knowledge topics
- Sitemap sources
- Proprietary frameworks
- Research
- Certifications
- Awards
- Intellectual-property references
- Brand-memory information
This information is used to configure the organization’s machine-readable knowledge environment.
6. Website Analysis and Technical Information
When you use ThatWare AI, we may automatically collect limited technical information such as:
- IP address
- Browser type
- Device type
- Operating system
- Date and time of access
- Session information
- Referring pages
- Platform activity
- Feature usage
- Error logs
- Security events
This information may be used for platform operation, troubleshooting, security, performance monitoring, fraud prevention, and service improvement.
7. Payment and Subscription Information
Paid subscriptions may be processed through third-party payment providers such as Razorpay.
ThatWare AI may receive information such as:
- Transaction ID
- Order ID
- Subscription plan
- Payment status
- Amount paid
- Currency
- Billing-related transaction information
Payment-card information is processed by the applicable payment provider and should not be stored directly on ThatWare AI servers.
Razorpay operates under its own privacy framework and states that it may process transaction, personal-identifier, device, and technical information when providing payment services. Razorpay
8. Communications
If you contact us, request enterprise information, subscribe to communications, or submit a support request, we may collect:
- Name
- Company
- Email address
- Phone number
- Message content
- Support correspondence
- Sales-enquiry information
- Communication preferences
We use this information to respond to your request and maintain appropriate business records.
9. How We Use Information
We may use information to:
Provide the Platform
Create accounts, authenticate users, maintain workspaces, and deliver requested features.
Analyze Websites
Process authorized website information to identify content, entities, relationships, technical signals, and AI-readiness factors.
Generate AI-Readiness Assets
Create resources such as:
- ai.txt
- llms.txt
- ai-manifesto.json
- vector-feed.xml
- semantic-sitemap.xml
and other platform-supported assets.
Generate Reports and Scores
Provide AVM, VEM, GEO, Entity Score, AI-readiness, knowledge, retrieval, and related analyses.
Process Subscriptions
Manage plans, billing status, invoices, allowances, and account entitlements.
Secure the Platform
Detect unauthorized activity, misuse, fraud, technical attacks, or security incidents.
Improve the Service
Understand feature performance, diagnose errors, improve usability, and develop platform capabilities.
Provide Support
Respond to technical, account, billing, enterprise, or service enquiries.
Meet Legal Obligations
Maintain records or disclose information when required by applicable law.
10. AI Processing
Some ThatWare AI features use automated systems to analyze website content, structure information, generate files, calculate scores, identify relationships, or produce recommendations.
Automated outputs may not always be complete or error-free.
Users should review important generated information before publishing, deploying, or relying upon it for business, compliance, or technical decisions.
Our Principle
AI supports analysis and automation. Human users retain responsibility for final review and deployment.
ThatWare’s wider public ethics framework similarly emphasizes human oversight, data responsibility, transparency, and validation when AI is used. Thatware
11. Legal Bases for Processing
Where required by applicable law, we process personal information using an appropriate legal basis.
Depending on the circumstances, this may include:
Contract
Processing required to provide a subscription, account, or service requested by you.
Consent
Processing that you have specifically agreed to where consent is required.
Legitimate Interests
Processing reasonably necessary to operate, secure, improve, or support the platform, provided those interests are not overridden by applicable privacy rights.
Legal Obligations
Processing required to comply with tax, accounting, regulatory, fraud-prevention, or other legal obligations.
Other Lawful Grounds
Other permitted bases may apply depending on your jurisdiction.
12. Cookies and Similar Technologies
ThatWare AI may use strictly necessary or functional cookies and similar technologies required for:
- Authentication
- Session management
- Security
- User preferences
- Platform functionality
If analytics, performance, advertising, or other non-essential tracking technologies are introduced, they should be disclosed and, where required, activated only after obtaining appropriate consent.
ThatWare’s current public privacy notice states that it does not use cookies or trackers for advertising purposes. Thatware
Recommended Policy
ThatWare AI should not use third-party advertising cookies by default.
This creates a stronger privacy position for an enterprise AI platform.
13. How We Share Information
We do not sell personal data to advertisers.
Information may be shared only where reasonably necessary with categories such as:
Infrastructure Providers
Hosting, database, security, content-delivery, and technical-service providers.
Payment Providers
Payment processors such as Razorpay.
Communication Providers
Email delivery, OTP, customer-support, or notification providers.
Analytics and Monitoring Providers
Where used, services that help maintain platform performance and security.
Professional Advisers
Legal, accounting, auditing, insurance, or compliance advisers where necessary.
Government or Regulatory Authorities
Where disclosure is required by applicable law or valid legal process.
Business Transactions
Information may be transferred in connection with a merger, acquisition, financing, restructuring, or sale of all or part of the business, subject to appropriate safeguards.
14. We Do Not Sell Personal Data
ThatWare AI does not intend to operate as a data broker.
We do not sell personal information to advertisers for monetary consideration.
If our practices materially change, this Privacy Policy and any consent mechanisms required by law should be updated before such processing begins.
15. Publicly Available Information
Some platform functionality may process information already publicly available on websites or other public digital sources.
Examples include:
- Company pages
- Public biographies
- Public social profiles
- Press releases
- Research
- Public documentation
- Awards
- Public business directories
Public availability does not remove our responsibility to process information appropriately.
We aim to process such information only where reasonably relevant to the requested functionality.
16. Customer-Controlled Data
When an organization uses ThatWare AI to submit information relating to its employees, founders, customers, clients, or other individuals, that organization may be responsible for ensuring it has the authority and lawful basis to provide that information.
Where ThatWare AI processes personal information solely on behalf of an enterprise customer, the customer may act as the controller or data fiduciary and ThatWare AI may act as a processor or service provider.
Enterprise agreements may contain additional data-processing terms.
17. Data Retention
We retain information only for as long as reasonably necessary for:
- Providing the service
- Maintaining an active account
- Fulfilling contractual obligations
- Processing billing records
- Security and fraud prevention
- Resolving disputes
- Maintaining required business records
- Complying with applicable law
Different categories of information may have different retention periods.
When information is no longer required, we aim to delete, anonymize, or securely dispose of it in accordance with applicable requirements and operational limitations.
Backup copies may remain for a limited period before being automatically overwritten or deleted.
18. Data Security
We use reasonable administrative, organizational, and technical safeguards designed to protect information against:
- Unauthorized access
- Loss
- Misuse
- Alteration
- Disclosure
- Destruction
Measures may include, where appropriate:
- Encryption in transit
- Access controls
- Authentication
- Secure credential handling
- Role-based permissions
- Security monitoring
- Logging
- Infrastructure protections
- Controlled administrative access
No online platform can guarantee absolute security.
Users are also responsible for protecting their passwords, authentication devices, and account credentials.
19. International Data Transfers
ThatWare AI may use service providers or infrastructure located outside your country.
Where personal information is transferred internationally, we aim to use safeguards required by applicable law.
For users protected by the GDPR, this may include appropriate contractual or other legally recognized safeguards where required.
20. Your Privacy Rights
Depending on your location and applicable law, you may have rights relating to your personal information.
These may include the right to:
- Know what information is processed
- Access personal information
- Correct inaccurate information
- Request deletion
- Request restriction of processing
- Object to certain processing
- Obtain portable copies of information
- Withdraw consent where processing relies on consent
- Lodge a complaint with an appropriate supervisory authority
The GDPR expressly provides rights including access, rectification, erasure, restriction, portability, objection, and protections relating to certain automated decisions. European Commission
To exercise applicable rights, contact us using the details provided below.
We may need to verify your identity before fulfilling a request.
21. Privacy Rights in India
Where applicable, ThatWare AI processes digital personal data in accordance with India’s Digital Personal Data Protection Act, 2023 and applicable rules or provisions as they come into force.
The Act establishes a framework for lawful digital-personal-data processing while recognizing individuals’ rights to protection of their personal data. MeitY
Applicable users may have rights and grievance mechanisms available under Indian law.
22. European Economic Area and UK Users
Where GDPR or equivalent UK data-protection requirements apply, users may have additional rights relating to:
- Transparency
- Access
- Correction
- Deletion
- Processing restrictions
- Portability
- Objection
- Consent withdrawal
EU guidance also requires organizations to explain processing purposes, legal bases, retention, recipients, international transfers, and applicable privacy rights in a clear and intelligible manner. European Commission
23. Children’s Privacy
ThatWare AI is designed primarily for businesses, professionals, organizations, and authorized representatives.
The platform is not intended for children.
We do not knowingly seek to collect personal information from children for ordinary platform use.
If you believe a child has provided personal information without appropriate authorization, contact us so the matter can be reviewed.
24. Third-Party Services and Links
ThatWare AI may provide links to:
- Payment providers
- Social networks
- Founder profiles
- Documentation
- Research sources
- External websites
- Other third-party platforms
These third parties operate under their own privacy policies.
ThatWare AI is not responsible for independent third-party privacy practices.
25. Security Incidents
If we identify a security incident involving personal information, we will investigate and take reasonable steps to contain and remediate the incident.
Where required by applicable law, we will provide appropriate notifications to affected individuals or relevant authorities.
26. Changes to This Privacy Policy
ThatWare AI may update this Privacy Policy as the platform, technology, regulatory environment, or processing activities evolve.
When material changes are made, we will update the Last Updated date and provide additional notice where required by law.
Continued use of the platform after an updated Policy becomes effective will be governed by the revised Policy, subject to applicable legal requirements.
27. Contact Us
For privacy questions, requests, or concerns, contact:
ThatWare AI
Powered by ThatWare LLP
Email: privacy@thatware.ai
or your designated official privacy email once finalized.
General Contact: info@thatware.co
For formal implementation, I recommend creating a dedicated address such as privacy@thatware.ai rather than routing privacy-rights requests through a general sales or support inbox.
28. Grievance and Privacy Requests
If you have a concern about the handling of your personal information, contact us with:
- Your name
- Account email
- Nature of the request
- Relevant account or workspace information
- Any additional information reasonably necessary to identify the relevant data
We will review legitimate requests in accordance with applicable law.
Privacy Commitment
Build Intelligence Without Compromising Trust
AI readiness should make information more structured and useful without reducing the individual’s right to privacy.
ThatWare AI is built around a simple principle:
- Use data purposefully.
- Protect it responsibly.
- Keep users informed.
- Maintain human accountability.