Privacy Policy. Last updated March 2026.

Thunder (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

Information we collect

Account information

When you create an account, we collect:

  • Email address
  • First and last name
  • Organization name and details

Advertising platform data

When you connect your advertising accounts, we access and process data from third-party platforms including LinkedIn, Google, and Meta. This data is retrieved on an ongoing basis while your accounts remain connected in order to provide up-to-date analytics and recommendations. This may include:

  • Campaign and ad group configuration and performance metrics
  • Creative assets and ad content
  • Audience targeting settings and demographic analytics
  • Budget, bidding, and spend data
  • Account-level settings and structure

Platform credentials and access tokens

To connect with advertising platforms on your behalf, we store OAuth access tokens and refresh tokens granted through each platform’s authorization flow. We may also create or manage accounts on advertising platforms on your behalf where necessary to provide our services. These credentials are encrypted at rest and used solely to access the platform data you have authorized.

Derived analytics

We automatically generate analytics from your advertising data, including performance trends, anomaly detection, creative performance rankings, and optimization recommendations.

Technical data

We collect standard technical information such as IP address, browser type, and device information to maintain and improve our services.

How we use your information

We use the information we collect to:

  • Provide and maintain our services, including connecting to and retrieving data from your advertising accounts
  • Generate insights, analytics, and optimization recommendations from your advertising data
  • Authenticate users and manage accounts
  • Communicate with you about your account and our services
  • Improve and develop new features
  • Comply with legal obligations

Third-party AI processing

Thunder uses third-party artificial intelligence services to analyze your advertising data and generate insights. Your data may be processed by the following providers:

  • Anthropic — for analysis, recommendations, and natural language processing
  • Cerebras — for fast-response processing of routine queries

Data sent to these providers is used solely for the purpose of delivering our services and is subject to their respective data processing agreements. We do not permit these providers to use your data for training their models.

Data sharing

We do not sell your personal information to third parties.

We may share data with service providers necessary to deliver our services, such as cloud hosting, infrastructure providers, and the AI processing services described above. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Data security

We implement appropriate technical and organizational measures to protect your data. Platform credentials and access tokens are encrypted at rest. Access to your advertising accounts is scoped to the permissions you grant through each platform’s OAuth authorization flow and can be revoked at any time through the respective platform’s settings.

Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. No third-party trackers are present on our platform.

Data retention

We retain your data for the duration of your customer relationship. Upon termination, your data will be deleted in accordance with our standard procedures unless a longer retention period is required by law. Cached advertising platform data is retained for short periods (typically hours) to improve performance and is automatically purged.

Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your information
  • Export your data in a portable format
  • Withdraw your consent to data collection at any time
  • Revoke access to your connected advertising accounts at any time

To withdraw consent or revoke platform access, you may disconnect your advertising accounts from within Thunder or revoke Thunder’s access directly through the respective platform’s settings (e.g., LinkedIn, Google, or Meta). Upon withdrawal of consent, we will cease collecting new data from those accounts. You may also request deletion of previously collected data by contacting us.

We will respond to all valid requests within 30 days. To exercise any of these rights, please contact us at the email address below.

Your responsibilities

You are responsible for ensuring that you have the necessary rights and permissions to connect your advertising accounts to Thunder and to authorize us to access the data within those accounts.

Breach notification

In the event of a data breach that affects your personal information, we will notify affected users and any relevant third-party platform partners promptly, and no later than as required by applicable law. Notification will include the nature of the breach, the data affected, and the steps we are taking in response.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Governing law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of law provisions.

Contact us

If you have any questions about this Privacy Policy, please contact us at dilip@usethunder.com.