Privacy Policy for Ithy

AI research providers

OpenAI and Anthropic models may run through Amazon Web Services (AWS) when that compatible funding source is selected. The requested model remains the same. AWS can then process the question, relevant attachments and research context; these requests do not require a separate consumer AI subscription.

Gemini requests may pass through OpenRouter to Google Vertex AI. OpenRouter then processes the question and relevant research context. The requested Google model remains the same.

Ithy shares your question, preferences, relevant attachment reading and retrieved evidence with the processing companies used by your research mode, including its final writer. Fast Research: OpenAI, Anthropic, Amazon Web Services (AWS). Standard Deep Research: OpenAI, DeepSeek, Anthropic, Amazon Web Services (AWS). Pro Deep Research: OpenAI, Google, Anthropic, Amazon Web Services (AWS), OpenRouter. Search queries go to Serper and, for Deep Research, Exa. Installed apps retain the search providers covered by their accepted disclosure. Providers may process data outside your country under their own policies. Only include information you are comfortable sharing with the providers used by your mode.

The linked policies explain each provider’s processing. Ithy does not automatically include your account email or payment details in research requests. Existing native app installs receive an updated disclosure before research starts with an additional provider. A lineup change does not send previously saved research to a new provider.

Advertising on selected public articles

Selected public articles may show one Google AdSense advertisement to web readers who are not signed in, in countries where Google supports delivery. Ithy requests non-personalized ads with restricted data processing. Google may receive the public article address, IP address and basic device information. Outside limited-ad serving, cookies or similar storage may support ad delivery, security and measurement. See how Google uses information from sites that use its services.

For readers in the European Economic Area, the United Kingdom and Switzerland, Ithy does not collect advertising consent or send a consent string. Google may serve limited ads without personalization; Google uses cookies, local storage or Shared Storage only for detecting invalid traffic and fraud in this mode. Ad code and creative assets may also be cached for delivery. See Google’s limited-ad explanation.

Ads stay off signed-in accounts, private research, live generation and Ithy’s native apps. Global Privacy Control, Do Not Track and an existing analytics refusal also keep advertising off. Unknown locations and unsupported destinations receive no ad request.

Public research library connector

An AI app connected to Ithy’s public library sends a short search topic, optional language and result limit, or a public article ID and optional topic focus. Do not include personal identifiers, credentials or private conversation history. The connector returns existing public article text, source links and available dates. It does not authenticate an Ithy account, access private or link-only articles, start new AI research, or consume answer allowances.

The connector does not save search topics as customer records or include them in application event messages. Google Cloud hosts the connector and processes technical request metadata, including IP addresses, user agents, request URLs, timestamps, response status and timing, for operation, reliability and abuse prevention. Ordinary application and request logs are currently configured for 30-day retention. Separate required cloud administrative and system audit records have 400-day retention. We do not use connector requests for advertising or behavioral profiling.

Your AI app processes the input and returned material under its own privacy policy and retention settings. Disconnect Ithy in that app to stop future connector requests. For privacy questions or requests, contact wluk@ithy.com. This public connection has no access to your Ithy account, folders or files.

Optional X ad measurement

X ad measurement is on by default for eligible U.S. web visits after the notice appears on a new X ad landing. Other or unknown countries require a separate choice first. We use our hosting provider's request-country signal, which is approximate and is not proof of residence. You can turn measurement off in the landing notice or Analytics preferences without affecting research, signup or payment. Saved X refusals, Global Privacy Control, Do Not Track, existing analytics refusal and account privacy exclusions keep it off; Ithy's native apps do not enable it. Google Analytics permission alone does not establish X permission.

When X measurement is enabled, Ithy can send X the X click ID, the time and type of a confirmed research admission, saved answer, new signup or first eligible positive payment, and an independent random event label to prevent duplicates. Ithy sends this directly from its server; no X script reads your page. Questions, attachments, answers, article links, private URLs, account or request identifiers, email, phone, identity hashes, IP address and browser fingerprint are excluded from this conversion payload. X receives our server's technical connection metadata and processes the conversion data under its privacy policy, including for advertising optimization and product improvement. Custom audiences from these events are disabled. You can also manage X's own advertising choices. A click ID does not establish which particular ad caused an outcome; X applies its own attribution rules.

The click scope expires at most 30 days after its original landing and is not renewed by returning. A protected first-party cookie and limited private records retain that scope; the stored click ID is encrypted. Withdrawal removes click data and cancels queued sends; a transmission already in flight cannot be recalled. Expired records are removed through our existing cleanup job. Minimal unlinked consumed-event tombstones remain only through the original window to prevent duplicate exports after withdrawal and regrant. No older clicks or outcomes are backfilled. Signup and first-payment reporting requires an eligible browser return, so blocked or closed browsers and late returns can leave outcomes unmeasured; same-second ordering that cannot be established is conservatively omitted.

The U.S. default is recorded separately from an affirmative choice. Both positive scopes last at most 30 days without automatic renewal; after a saved positive scope expires, a fresh choice is needed. A saved refusal stays off until you change or clear it. Refusal preferences can remain in your browser longer than measurement data, including a refusal cookie lasting up to one year. Country eligibility and privacy controls are checked again before a browser can use a default scope.

Ithy removes the click parameter from the browser URL before its new analytics dispatch and does not add it to Google Analytics or application event messages. The initial inbound URL can already have entered Google Cloud's access-restricted operational request logs before this page runs; those ordinary logs have 30-day retention. This URL cleanup does not erase historical or platform logs. Declining X measurement does not change the operational logging required to serve the original request.