# Privacy Policy Last updated: October 22, 2026 This policy explains what we collect and why, how we handle it, and the rights you have over it. We never sell your data. This policy applies to the websites and products built and maintained by Vesperion Gate Inc.: Thicket, LensCherry and vesperiongate.com (together, the “Services”). We are a Canadian company headquartered in Ontario. It covers site visitors, prospective customers, and customers and the people they authorize to use their accounts. When an organization provides your account, it controls the workspace, who is in it and what is shared, and it decides why the content in it is processed. We process that content on its instructions under our [Data Processing Addendum](https://www.vesperiongate.com/policies/dpa), which sets out our duties as a processor. If you have questions about how that organization handles your information, contact it first; if you write to us at [privacy@vesperiongate.com](mailto:privacy@vesperiongate.com), we will help or refer your request to it. ## What we collect and why We collect as little as the Services need. In practice: ### Identity and access Signing up asks for your name, your email address and sometimes an organization name, which set up your account and let us send you essential service information. A profile picture is optional. If you sign in with an external provider such as Google or Apple, we receive the identity information that sign-in supplies. We log sign-ins, sessions, IP addresses and device or browser details to keep accounts secure and to mitigate abusive signups, and we keep that access data while your account is active. ### Billing information If you buy a paid plan or credits, you give your payment details to our payment processor, Stripe; card numbers never reach our servers. We keep transaction records, with the card's last four digits and your billing address, for invoices, taxes, billing support and fraud prevention. ### Product content Everything you put in your accounts, or receive there, is stored so the products can do their job. In Thicket that is your projects, to-dos, messages, documents, comments, files, chat, schedules, assignments, notifications and activity. In LensCherry it is your prompts, reference photos, generated images, profiles and generation settings. It stays as long as the account does; deletion and closure are described below. ### Product and website interactions To run the products and investigate problems, we record usage and diagnostic information: account identifiers, which features were used and when, browser and operating-system details, performance information and error reports. Error reports can contain personal information. On Thicket’s public website and signup page we measure visits with Plausible, which receives the page address, the referring site and technical browser information, uses no cookies or persistent identifiers, and processes that data in the European Union. Private workspace pages, account identities and form contents are never sent to it. ### Cookies We use first-party cookies and similar browser storage to keep you signed in, protect against forgery and remember preferences. We run no advertising trackers and share no email hashes with ad networks; if we ever introduce optional analytics or advertising technologies that need consent, we will say so and ask first. You can clear or block cookies in your browser, though the products will not work without the essential ones. ### Anti-bot assessments Cloudflare Turnstile protects sign-up and selected forms from automated abuse. It evaluates technical browser and network information to tell a person from a program and gives us the result; we do not see the evaluated information. ### Voluntary correspondence If you write to us with a question or for help, we keep the exchange, address included, so that the history is there the next time you write. Information you volunteer, such as survey answers, is kept too, and we ask before recording a customer interview. Marketing email includes an unsubscribe link; essential service and security notices are separate. ### Mobile app permissions Our mobile apps ask before using the camera, photos, notifications or other sensitive features of your device. Consent is optional; a feature that needs a permission you decline will not work. ## Access and disclosure **Running the products.** Third-party providers help us run the Services: hosting, storage, backups, network protection, payments, email, support and diagnostics, and LensCherry’s image generation and safety screening. Our [provider register](https://www.vesperiongate.com/policies/subprocessors) lists each one, what it processes and where it is based. **Apps and services you connect.** When you link another service to Thicket, information flows to it on your instruction. That covers apps connected through OAuth, apps you give an API token, and tools run through the command-line tool, AI assistants and agents among them. Depending on the access you approve, such an app can read the workspace content you can see and, with Full access, change it or post as you; you pick Read-only access or Full access on the approval screen, and you can revoke the connection in My settings whenever you like. Revoking stops its next request. It does not reach back: what the app already holds is governed by that app's own terms and privacy policy, and what it already did stays done. An owner or administrator can also give an agent its own membership, with its own access and credentials, to work through. What an app posts becomes workspace content like anything else posted there. Workspace content is also shared the way you share it: with the people and clients you add, through public links you create, exports you run, and the notifications the products send. **Support, with your consent.** A support case sometimes needs us to look inside your account, and we ask you first. Beyond that, nobody at Vesperion Gate reads your content except in the few situations below. **To fix errors.** When an automated process stops partway, we get an alert. When we can fix it without looking at personal information, we do; in rare cases we have to look at the minimum needed. **Security and abuse.** Logs and metadata are examined to keep accounts and the Services secure. Opening an account to investigate an abuse report is the last step, not the first. Where we find the Services put to a prohibited use, we take the action the situation calls for, which can include a report to the authorities. **Aggregated and de-identified data.** We may use information that no longer identifies anyone for statistics, product decisions and marketing. Hashed or account-linked information is not treated as anonymous. **Legal requirements.** We do not hand user data to a government on request. We disclose when legal process compels us, or when an emergency leaves no alternative, and then only the minimum, after telling the affected customers unless the law forbids it or the emergency makes prior notice inappropriate. Our infrastructure is in the United States, and our providers may face lawful requests in the countries they process in. If a tax authority audits us, we disclose only the billing information the audit needs. **If the company changes hands.** If Vesperion Gate is acquired by or merges with another company, we will notify you well before any of your personal information is transferred or becomes subject to a different privacy policy. ## Artificial intelligence Thicket has no AI of its own working on your content, and nothing you put in Thicket trains an AI model, ours or anyone else's. Every AI provider we engage is bound by contract not to train on your content, and our [Data Processing Addendum](https://www.vesperiongate.com/policies/dpa) commits us never to permit it. LensCherry is an AI product. It generates and edits images with providers we choose, Google’s Gemini API and, from October 14, 2026, OpenAI’s API, and screens images for safety with Google Cloud Vision. For each request those providers receive the prompt, the reference and generated images and technical request information, and keep them only as their terms describe; the [provider register](https://www.vesperiongate.com/policies/subprocessors) links to each one’s data handling and retention. A LensCherry profile is a set of reference images that guide generation, not a model trained on you. We keep your generation results and moderation outcomes in your account, and authorized staff may review reported or flagged images to investigate abuse. Our own staff use assistants from [Anthropic](https://www.anthropic.com) and [OpenAI](https://openai.com) while building the products, for writing and reviewing code. Those tools sit outside the products and never touch your content: customer content, support correspondence and identifiable production records stay out of them, training on our conversations is turned off in each account, and both providers appear in our [provider register](https://www.vesperiongate.com/policies/subprocessors). Thicket can be used with AI assistants and agents that you bring yourself: ChatGPT, Claude or another assistant connected through MCP, a coding agent working through the command-line tool, or an app using the API. Such an assistant works with exactly your access, no more, and its handling of what it reads, including storage, review and training, is set by your own agreement with its provider, not by us. Read-only access still shares what it reads. Connecting an assistant is covered under “Apps and services you connect” above. ## Your rights with respect to your information We extend the same rights to everyone, whatever the law where you live. Depending on applicable law, you may have the right to know what we collect and why, to access it and receive a copy you can take elsewhere, to correct it, to have it erased, to restrict or object to how it is used, to withdraw consent where consent is the legal basis, to not be subject to decisions made solely by automated processing, and to complain to a regulator. Exercising a right will never get you a worse service, though erasing some information can mean closing an account that needs it. Many of these are in your hands in the products: you can change your profile and delete content yourself. For anything else, email [privacy@vesperiongate.com](mailto:privacy@vesperiongate.com). We may need to verify your identity, and some requests belong to the organization that controls your workspace, in which case we will refer you to it. We respond within the period the applicable law allows, and if we cannot fulfill a request we will explain why and how to appeal. You can complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner, and in the EEA or the UK to your data protection authority. Where the GDPR or UK GDPR applies, our legal bases are performance of our contract with you, our legal obligations, our legitimate interest in securing and administering the Services, and consent where we ask for it. California residents have the rights to know, access, correct, delete and limit certain uses; we do not sell personal information or share it for cross-context behavioral advertising. ## How we secure your data All data is encrypted with HTTPS between you and us, uploaded files are encrypted at rest, and database backups are encrypted. Most data in our databases is not encrypted at rest, since the products need it ready to show you; it is protected by access controls, restricted administration and monitoring like the rest of our systems. Our [Trust and Security](https://www.vesperiongate.com/trust) page has the details, and our [Security Response](https://www.vesperiongate.com/trust/response) page says how to report a problem and what happens after you do. ## What happens when you delete content in your accounts In Thicket, items and projects you trash stay in the Trash for 30 days, where you can restore them; authorized Trash controls can remove them sooner, and some things, such as chat messages, are deleted right away. A connected app or assistant can move items to the Trash but can’t delete anything permanently. After the Trash period, content is removed from our active systems, and copies in our backups expire within 28 days of that. If you close your Thicket account, or ask LensCherry to delete yours, access ends at once and you have 30 days to change your mind. Then your content is removed from our active systems, and ordinary backups are purged within 60 days of closure. We cannot recover content after that. See the [Cancellation Policy](https://www.vesperiongate.com/policies/cancellation) for the difference between cancelling a plan and closing an account. ## Data retention We keep your information for as long as we need it for the purpose we collected it, and then delete or aggregate it, except where we must keep it to meet a legal obligation, resolve a dispute or enforce our agreements. Specific periods are given through this policy. Billing and tax records can outlast an account. Security and connection records are kept for as long as securing the Services needs them: Thicket’s connection audit records, which hold identifiers and action metadata but not content, are deleted after 180 days and may remain after an account closes, and the short-lived records that stop a connected app repeating a write expire within 24 hours. Backup rotation and deletion jobs run on schedules, so a deadline is a day, not a second. Copies held by apps you connected follow those apps’ own retention. ## Location of site and data Our products are housed in the United States: application servers, databases, uploaded files and backups for Thicket and LensCherry are all there, and we administer them from Canada. Our providers may process some information elsewhere, for support, networking, email, payments or AI processing, as the provider register notes. Information you give us from anywhere else in the world is therefore stored in the United States. ## When transferring personal data from the EU or the UK Personal data transferred out of the EU or the UK must be protected to the standard EU and UK law require. Our [Data Processing Addendum](https://www.vesperiongate.com/policies/dpa), which forms part of our Terms of Service without a separate signature, incorporates the EU Standard Contractual Clauses and the UK Addendum for that purpose. You can read it [on this site](https://www.vesperiongate.com/policies/dpa) or download it as a [PDF](https://www.vesperiongate.com/policies/dpa.pdf) or a [Markdown file](https://www.vesperiongate.com/policies/dpa.md). Canada’s adequacy arrangements apply within their scope and do not automatically cover onward transfers; write to us for the safeguards that apply to your account. ## Changes and questions This policy changes when our practices or the law do. For a change that matters, the date at the top moves, the [policy updates](https://www.vesperiongate.com/policies/updates) page records what changed, and subscribers hear about it by email or feed. Where the law requires a specific notice or fresh consent, we provide it separately. Anything to ask about this policy, your data or your rights? Email [privacy@vesperiongate.com](mailto:privacy@vesperiongate.com). For help with your account, write to [support@vesperiongate.com](mailto:support@vesperiongate.com).