Privacy Policy
Privacy Policy
Version 1.1
Effective date: November 11, 2026
This Privacy Policy explains how Thought2Creations LLC ("Thought2Creations," "we," "us," or "our") handles information in connection with the Ask Now Save Now website and assistant, including the character Pip (the "Service").
Contact: Thought2Creations LLC, 1250 Western Blvd, Ste L2 #417, Jacksonville, NC 28546 (our public mailing address) · contact@thought2creations.com · (910) 601-5122.
0. At a glance
| Topic | Our current practice |
|---|---|
| Who the Service is for | People 13 and older. It is not directed at children under 13. |
| Accounts or payments | None. The Service does not have accounts and does not process payments. |
| What you type or say | Your question is sent to our servers and to our AI provider to generate a reply. We do not keep a chat history after you leave the session. Our AI provider may retain prompts and answers, encrypted, for up to 30 days for abuse and security review, then delete them, unless a longer period is required by law or needed to investigate abuse. It does not train on them unless we permit it — we do not permit it. |
| Microphone | Optional and off until you agree. If you use it, your browser sends audio to its speech service (typically Google in Chrome or Edge, and Apple in Safari). We receive a text transcript, not a stored recording. We do not create a voiceprint. |
| Spoken replies | Optional. Your device or browser reads the answer aloud. |
| Cookies and ads | We do not use advertising or analytics cookies or pixels. Our host may set strictly necessary cookies or logs to deliver and secure the site. |
| Sale of personal information | We do not sell your personal information, and we do not share it for cross-context behavioral advertising. |
1. Information we handle
A. Information you provide
- Questions and related chat text. If you type a question, or if you use the microphone and your browser turns your speech into text, we receive that text so we can generate an answer. We also process the answer itself. Chat text is sent to our AI provider, as described below.
- Age and terms confirmation. When you check the box to use the Service, your browser stores a confirmation that you are 13 or older, that you agree to the Terms of Use and Privacy Policy, and, if you are under 18, that a parent or guardian has agreed for you. That confirmation is kept only in your browser's localStorage, together with a timestamp and a terms-version number (
TERMS_VERSION, currently 1.1). We do not receive that stored confirmation on our servers, and we do not use it to identify you. If you clear your browser storage, you will be asked to confirm again. A separate localStorage flag records whether you have already agreed to the microphone notice. - Messages you send to us. If you email contact@thought2creations.com, or call the number we publish, we receive whatever you include.
Please do not include passwords, payment-card numbers, government ID numbers, health records, or another person's sensitive information in a question.
B. Information collected automatically
When you load the Service, our hosting provider, Vercel, Inc., processes ordinary technical data needed to deliver and secure the pages (for example IP address, date and time, requested URL, and user-agent). We use the IP address on our server, in memory, to apply a short-term rate limit so the Service is not abused. That rate-limit data is not written to a lasting application log and expires on the server's ordinary memory cycle.
We do not use advertising or analytics tools on the Service, and we do not use the Service to build a marketing profile of you.
C. Voice
If you tap the microphone and agree to the voice-typing notice, your browser's speech-recognition service processes your live audio. In Google Chrome or Microsoft Edge, that audio is typically sent to Google. In Safari, it is typically sent to Apple. Other browsers may differ or may not support this feature. Those companies handle that audio under their own policies. We do not receive or store the audio file, and we do not create, store, or attempt to identify you by a voiceprint or other biometric voice identifier. We receive the text transcript and handle it as chat text.
Microphone use is opt-in. You may decline and type instead, and you may later revoke microphone permission in your browser.
If you leave voice output on, your device or browser's text-to-speech engine may read answers aloud. That processing typically stays on your device, depending on your browser and operating system.
2. How we use information
We use the information above to:
- operate, secure, debug, and rate-limit the Service;
- send your question to our AI provider and return an answer;
- honor your age-gate, microphone, and voice-output choices;
- respond to messages you send us;
- comply with law and enforce our Terms.
We do not use your chat text to train our own foundation models (we do not operate one). We do not permit our AI provider to train its models on your Service prompts or answers.
3. When we share information
We share information only with:
- Service providers / processors that help us run the Service, under obligations to use it only for that purpose:
- Hosting: Vercel, Inc.
- AI provider: SpaceX Super Intelligence LLC, through the xAI API at api.x.ai, which processes your question and recent turn history to generate a reply. On its enterprise terms, it acts as our processor for personal data in that content. It may retain prompts and answers, encrypted, for up to 30 days for abuse and security review, then delete them, unless a longer period is required by law or needed to investigate abuse, and it does not train on them unless we permit it — we do not permit it. Its terms, privacy policy, and data-processing addendum are published at x.ai/legal.
- Browser speech vendors (only if you use the microphone): typically Google (Chrome/Edge) or Apple (Safari), as described above. They are not our processors in the usual sense; your browser sends audio to them directly.
- Our email provider, if you write to us, so that the message can be delivered to our inbox.
- Professional advisors, or authorities, when required by law or to protect rights and safety.
- A successor in a merger or asset transfer, with notice where required.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
4. Retention
- Chat text: We do not keep a chat history on our servers after your session ends. The contents are processed in memory to generate a reply and are not written to our application database.
- AI provider copies: The provider's default, under its current API and enterprise terms, is to keep API requests and responses, encrypted, for up to 30 days for abuse and security review, then delete them, unless a longer period is required by law or needed to investigate abuse. The provider states that it does not train on API inputs or outputs without the customer's permission. We do not give that permission. Turning off optional conversation storage on the API request is not the same as Zero Data Retention.
- Age-gate and microphone confirmation: kept only in your browser's localStorage, as a terms-version number and a timestamp, until you clear your browser storage or we change the terms version and ask you to confirm again. We do not receive a copy on our servers.
- Rate-limit and host logs: only as needed to secure the Service, then deleted or allowed to expire under the host's and our ordinary settings.
- Email or calls you send us: kept while needed to handle your request and for ordinary business, tax, and legal retention, then deleted or archived under our schedules.
We do not retain personal information indefinitely. We do not collect personal information from children under 13 on this Service; if we discover that we have, we will delete it, except where a short record is required by law.
5. Children
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. You must be 13 or older to use the Service. If we learn that a child under 13 has used the Service or has submitted personal information, we will block access and delete that information, except where a short record is required by law. If you believe a child under 13 has used the Service or has submitted personal information, contact contact@thought2creations.com and we will take those steps.
Parents of teens 13 to 17 should decide whether this Service is appropriate and should understand that questions are sent to a third-party AI and, if the microphone is used, to a browser speech vendor.
6. Cookies and similar technologies
We do not use advertising or analytics cookies or pixels. The Service's own pages are not designed to set those technologies. Your browser and our host, Vercel, Inc., may use strictly necessary cookies or similar technologies, or ordinary server logs, to deliver and secure the Service. We do not use the Service today for cross-context behavioral advertising. If that changes, we will update this Policy and obtain consent where required.
Do Not Sell or Share. We do not sell personal information and we do not share it for cross-context behavioral advertising as those terms are used under the CCPA/CPRA. If that changes, we will update this Policy and provide required opt-out links.
7. Your choices and requests; California and other state rights
- You may use the Service by typing only, and you may decline or later revoke microphone permission in your browser.
- You may turn spoken replies off.
- You may stop using the Service at any time, and you may clear your browser's localStorage to remove the local age-and-terms and microphone flags.
- Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you by emailing contact@thought2creations.com. We will need enough information to find and verify your request. We may not be able to recover chat text that was not retained.
We may not currently meet the formal "business" thresholds of the California Consumer Privacy Act, as amended by the CPRA, or of similar comprehensive state privacy laws. We will still consider reasonable requests. If we are or become a "business" or covered entity under those laws, you may have some or all of the following rights, subject to legal limits: to know and access personal information we hold about you; to correct inaccurate personal information; to delete personal information; to opt out of the sale or sharing of personal information (we do not sell or share it for cross-context behavioral advertising); and to not be discriminated against for exercising those rights. You may also use an authorized agent where the law allows it, and we may require proof of authorization and identity. We do not use sensitive personal information about you to infer characteristics, and we ask that you not send us sensitive personal information in a question.
California's "Shine the Light" law (Cal. Civ. Code § 1798.83) allows certain residents to ask about personal information disclosed to third parties for their direct marketing. We do not disclose personal information to third parties for their direct marketing.
8. Security, breach notice, and international processing
We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure.
If a security breach of personal information occurs, we will provide notice as required by the North Carolina Identity Theft Protection Act, N.C. Gen. Stat. § 75-65, and by any other applicable law, including notice to affected individuals and, where the statute requires it, to the North Carolina Attorney General.
Our providers may process information in the United States and in other countries. The AI provider's default API endpoint, which we currently use (https://api.x.ai), does not guarantee a processing region. The provider also documents a United States regional endpoint; we will update this Policy if we switch to it.
9. Changes
We will post updates to this Policy with a new effective date. If we make a material change, we will provide a more prominent notice where required.
10. Contact
Thought2Creations LLC
1250 Western Blvd, Ste L2 #417
Jacksonville, NC 28546
(our public mailing address)
contact@thought2creations.com
(910) 601-5122