Privacy Policy

Worthinker LLC

Worthinker is the public name of the workspace. Worthinker LLC owns and operates it. This notice does not publish a street address. Privacy and deletion requests use the contact path at the end of this page.

Account and creator records

Worthinker uses Supabase authentication and private account records for your email, login username, creator display name, creator category, preferences and membership state. Saved promotional codes, responses, ideas, PR packages, collaborations, agreements and manually entered performance records are associated with your account. Category choices are visible to Worthinker administrators for organizing registered creators; choosing a category does not publish your profile or authorize a sale of your information.

Financial records

You can save income, expenses, collaboration amounts, and promotional-code results in your private account. Worthinker does not connect a bank in this release. Those entries are records you type. They are not a bank feed, a completed invoice payment, or a tax return. If you subscribe to Pro through configured Stripe billing, Stripe processes the card payment. Worthinker LLC receives subscription status from Stripe and does not collect or store your card number.

Calendar plans and uploaded media

Content plans privately store the title, caption, notes, planned date/time, time zone, status and any selected account. Photos/videos you explicitly choose are uploaded to private storage; prepared photos may be resized and converted to JPEG. The website does not receive continuing access to your photo library. Saved draft media stays until you remove it or delete the draft, even if you disconnect a social account. File removal uses asynchronous storage cleanup, and existing submitted operations may retain required files. Plan in Calendar creates one linked copy of a saved idea and its inspiration links; later edits stay independent. You can download your planning text and file metadata from Calendar or Settings, and download media individually from its plan. Posted manually is your tracking label, not provider confirmation. Planned dates do not automatically publish content.

Connected Instagram accounts

When you authorize an eligible professional Instagram account through Instagram Login or an available linked Meta flow, Worthinker uses the permissions you grant to display account identity, an available profile image and follower count, posts, and available analytics. Creator and Business professional accounts are supported; personal-account access is not offered. Optional messaging access requires a separate grant and in-product opt-in. Credentials are encrypted server-side and are not included in browser account records or ordinary data exports. Stored analytics remain subject to Instagram availability, definitions, eligibility, and date limits. Missing information is not invented. Worthinker does not publish Instagram content in this release.

Connected YouTube channels

Worthinker uses YouTube API Services with your Google authorization. The YouTube Data API reads the channel you select, its image when returned, available rounded subscriber counts, and public video titles, publication times, links, covers, and lifetime view, like, and comment counts. When you also grant YouTube Analytics access, Overview and Analytics can read channel views, likes, comments, and shares earned during the dates you select, including activity on older videos. Audience can also display viewer age and gender percentages and country view counts for those dates when YouTube makes them reportable; missing or withheld demographics stay unavailable. Intelligence can use saved lifetime video statistics and available saved audience breakdowns matching the requested dates. Channel activity totals remain in Overview and Analytics. Private and unlisted videos are not imported. No comments are managed and no videos are published. Google access and refresh credentials stay encrypted on the server. Video covers load from YouTube's public thumbnail address after Worthinker checks that the video belongs to your connected channel. Disconnecting YouTube in Connected Platforms removes its local credentials and imported channel, video, and analytics data. Independent content plans and photos are retained. You can also revoke Worthinker in your Google Account permissions at https://myaccount.google.com/permissions.

Connected TikTok accounts

Configured TikTok connections use Login Kit and approved Display API permissions to read account identity, available profile fields, statistics, and public videos. Available fields depend on the permissions actually granted and TikTok eligibility. Credentials and refresh tokens stay encrypted on the server; missing statistics are shown as unavailable. Worthinker does not read TikTok direct messages or publish TikTok content in this release. Disconnecting removes local authorization and stops synchronization while retaining saved historical records; revoke the remote grant in TikTok settings and use the privacy-request process for complete deletion.

Instagram messages

Instagram messaging is optional. After granting messaging access and explicitly enabling receiving, new incoming message text, sender identifiers, timestamps and attachment-presence information may be stored privately in Creator Inbox. You can separately select conversations to display up to 20 recent incoming and outgoing messages directly from Instagram, including history. Worthinker stores your conversation selection; these fetched message bodies are held in the open view and are persisted only if you explicitly save an incoming message as an opportunity. Stopping receiving clears conversation selections. Attachment URLs are not followed or downloaded. Messages are not automatically sent to AI or converted into collaborations. You choose which messages to save as opportunities. The received-message view retains the latest 2,000 messages per connected account; opportunities you explicitly save are separate records. Previously imported manual message archives are private snapshots, not API deliveries. They are cleared on account disconnect or Instagram data erasure; separately saved opportunities remain deletable in Inbox. Worthinker does not send Instagram replies or publish content.

Connected email accounts and agreements

Configured Pro Gmail uses the Gmail read-only permission. Configured Pro Outlook uses Microsoft Graph Mail.Read and User.Read, plus offline access needed to refresh authorization. Connecting either provider requires explicit consent to read eligible Inbox messages and send bounded message text to the configured AI provider for opportunity screening. Screening includes messages received on or after the user created the Worthinker account and may process messages without sponsorship keywords. Gmail excludes spam, trash, and identified mailing lists before AI screening; Outlook limits collection to the Inbox and asks the AI to classify routine or unrelated messages. Unrelated message text is not retained as an opportunity. Potential opportunities, exact supporting excerpts, extracted terms, and risk indicators are saved for creator review. Risk labels do not verify identity or prove fraud. Minimal derived message identifiers prevent duplicate screening. Gmail and Outlook share one monthly screening allowance; an attempted screening can count even when it does not produce a saved opportunity. Provider permissions can cover more content than Worthinker selects. Worthinker cannot send, delete, or modify email. Contract PDF extraction processes an upload in memory and saves extracted text only when you confirm. Documents explicitly attached to Inbox records or collaborations remain in private storage until removed. Automatic email attachment downloading is not implemented.

Worthinker Intelligence and AI processing

The What’s working review computes patterns from saved metrics without sending a new AI request. When you submit an Intelligence question, Worthinker sends the question, conversation context, and relevant saved workspace data to OpenAI to answer it. Automatic Gmail and Outlook screening sends bounded eligible message source text to OpenAI only after explicit connection and screening consent. Requests use the provider's store:false setting; this does not promise zero provider retention. Worthinker configures these requests without training authorization and does not use customer email content to train Worthinker models. AI findings are suggestions requiring review, risk labels do not guarantee legitimacy, and contract findings are not legal advice. AI output cannot send messages, accept agreements, publish content, or modify connected accounts. Each email screening attempt counts toward the shared monthly allowance, including some failed attempts; previously processed messages are deduplicated. Review important output against the original source.

Service providers and security

Worthinker LLC uses service providers to operate features you choose: hosting infrastructure; Supabase for authentication, database, and private storage; Meta for authorized Instagram access; TikTok for authorized TikTok access; Google for YouTube API Services and Gmail authorization; Microsoft for Outlook and Microsoft Graph authorization; OpenAI for configured AI features; and Stripe for configured subscription billing. Those providers process information under their own terms and privacy notices. Worthinker encrypts provider credentials server-side and does not expose them in ordinary browser account records. Private credentials and source message text are excluded from application diagnostic messages. Diagnostics may contain operational metadata such as provider, connection state, error stage, and timestamps. Worthinker does not sell personal information and has no public creator directory or data-sale feature.

Platform-data use limits

Worthinker uses connected-platform data only to provide and secure the user-facing features you authorize, maintain the connection, prevent duplicate processing, comply with law, and respond to support or security issues. Worthinker does not sell connected-platform data, use it for targeted advertising, build advertising profiles, or transfer it to data brokers. Google user data is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements. Human access to private provider data is restricted to what is necessary for user-requested support, security or abuse investigation, legal compliance, or processing performed by service providers under appropriate obligations. Provider data is not exposed to other Worthinker users.

Your controls and deletion requests

Disconnecting a provider deletes or disables the local credential as described in Data deletion instructions and stops new synchronization. It does not delete original content held by that provider, and you may also need to revoke Worthinker in the provider's account settings. Instagram disconnect preserves imported history until Delete Instagram data is used. YouTube disconnect removes its imported channel, video, and analytics records. TikTok disconnect preserves saved history until a verified deletion request. Gmail or Outlook disconnect deletes local mailbox credentials; saved opportunities and prior reviews remain until removed through available Inbox controls or a verified deletion request. Delete saved Gmail data removes Gmail-derived opportunities, reviews, duplicate-screening identifiers, and attached Inbox documents, but does not reset monthly usage or remove separately confirmed business records. Stopping Instagram receiving clears received messages while preserving separately saved opportunities. Full Worthinker account removal is handled through a verified privacy request. Deleting one source record does not silently delete a collaboration, calendar item, or financial record you separately confirmed.

Privacy choices and age limits

You can decline a platform connection, revoke provider authorization, pause supported processing, delete supported records, or request access to or deletion of account data through the published controls and contact process. Rights vary by location, and Worthinker may verify identity before fulfilling a request. Worthinker is intended for people who are at least 18 years old and is not directed to children. Do not connect an account or submit another person's private information without authorization. Worthinker operates from the United States, and its providers may process data in the United States or other locations described in their notices.

Retention

Saved creator records remain in the account until removed through the relevant controls or an account/data request is processed. Hosting-provider backups and provider-held records may follow separate retention schedules; deleting an active record does not promise immediate erasure from every backup. Contact Worthinker for information about backup handling associated with a deletion request.

Connected provider notices

Connected services are also governed by their providers’ notices: Meta Privacy Policy · TikTok Privacy Policy · Microsoft Privacy Statement · OpenAI Privacy Policy. You can manage Microsoft authorization in Microsoft consent settings. Organizational Microsoft accounts may require an administrator to manage consent.

Contact and data requests

Email jackreed1604@gmail.com for privacy, data-deletion or account requests.

Data deletion instructions · Privacy notice · Contact Worthinker