1. Introduction
Thirdi Pte Ltd (“we,” “us,” or “our”) is dedicated to protecting individual privacy and adhering to data protection regulations. This policy explains how we handle your Personal Information when you use our services.
2. Applicability and Compliance
The company follows Singapore's Personal Data Protection Act (PDPA) and respects EU data protection requirements, including GDPR standards.
3. Definitions
- Personal Information: Data identifying individuals, such as names, addresses, emails, phone numbers, dates of birth, login credentials, device details, location data, and browsing activity.
- Sensitive Information: Data regarding racial/ethnic origin, political views, religious beliefs, health status, or other protected categories under applicable laws.
4. Collection of Personal Information
Information is gathered through email, website interactions, and third-party services. The company communicates collection purposes clearly and follows data minimization principles.
5. Purpose of Collection
Primary use is delivering services to you. Secondary uses include service communications, promotional materials, and product updates. Importantly, “we do not sell your personal information to third parties for marketing or any other purposes.”
The company partners with Microsoft Clarity and Microsoft Advertising to analyze website usage through behavioral metrics, heatmaps, and session replay for product improvement and marketing. First and third-party cookies capture usage data for optimization, security, and advertising purposes.
6. Consent and Notification
When collecting information, the company explains its purpose and intended use, obtaining explicit consent where legally required.
7. Sensitive Information
Sensitive data is used only for its original purpose or closely related secondary purposes, with explicit consent or legal authorization.
8. Third Parties
Information is collected directly from you when feasible. When third parties provide information, you'll be informed about its usage.
9. Disclosure of Personal Information
Personal Information is disclosed to third parties only:
- With explicit consent
- When required by law
- As necessary for service provision (e.g., to service providers)
The company emphasizes: “We do not sell your personal information,” including data from Google APIs.
10. Google API Data Usage
The company complies with Google's API Services User Data Policy. Google-obtained information is used solely for purposes specified during OAuth consent, such as authentication. Data isn't shared with third parties except when legally required or with explicit user consent.
11. AI Assistant and Agent Access
third i publishes a connector built on the Model Context Protocol. When you add it to an AI assistant or agent and sign in with your third i account, that client can read the marketing data your workspace has connected, on your behalf and for as long as you allow it.
- What it can read. Advertising and organic performance data, creative metadata, saved reports and connection status from the sources your workspace has connected. It does not read your third i password or your ad-platform credentials.
- What it can change. An assistant or agent can prepare changes to connected Google Ads and Meta Ads accounts. Nothing it prepares is applied until a person approves it inside third i, and every approval is recorded.
- Who else processes it. The content of those requests and responses is processed by the AI provider you chose, or on the machine running your agent, under their terms. third i does not control that processing. Your ad-platform credentials are never shared with the AI provider or with any machine running an agent; they remain within third i.
- Your controls.You may revoke the connection at any time, from your AI client or from third i. Revoking it ends the client's access immediately.
12. Security of Personal Information
Reasonable protections safeguard against misuse, loss, unauthorized access, modification, or disclosure. Unneeded information is securely destroyed or anonymized.
13. Access and Correction
You have rights to access and correct your Personal Information, subject to certain exceptions. Contact the company to request access; identification may be required.
14. Maintaining Data Accuracy
The company maintains accurate, complete, and current Personal Information. Report any inaccuracies for correction.
15. Privacy by Design
Data protection principles are integrated into product and service development.
16. Cookies and Tracking Technologies
Cookies and similar technologies improve user experience and enable analytics. Details on the specific cookies we use and how to manage your consent are in our Cookie Policy.
17. Data Retention Policy
Personal information is retained during your service engagement. After account termination or consent withdrawal, data is securely deleted within 60 days. Specific retention periods are detailed in the Data Retention Policy.
18. International Data Transfers
Adequate protections accompany international data transfers, using mechanisms like standard contractual clauses or binding corporate rules.
19. Data Breach Notification
If a breach risks your rights and freedoms, affected individuals and relevant authorities are notified within legally mandated timeframes.
20. Policy Updates
This policy may change. Review it regularly on the website for updates.
21. Contact Information
For privacy questions, complaints, or requests:
Email: info@thirdi.ai