Security & data handling.

Thematic is a software deal register delivered by email, on the web and in Slack. This page explains what data we handle, why, and how we protect it. If your team needs a security questionnaire completed, contact us at deals@thematichq.com.

Account data:

• Name and work email for each person with access
• Your firm’s name, plan and seat list
• The sectors, subsectors, firms and companies each person chooses to follow

From Slack, when your workspace installs Thematic:

• Your workspace ID and name, and the channels you choose for Thematic’s posts
• Slack user IDs and email addresses of workspace users, used only to match them to Thematic seats
• Messages that directly @mention Thematic, and messages sent to Thematic in a direct message
• Settings chosen in Thematic’s Slack App Home

Usage data:

• Basic service logs (sign-ins, pages and posts opened, errors), used to run and improve the service

• Channel history or any message that doesn’t @mention Thematic
• Direct messages between people in your workspace
• Files, documents or attachments shared in Slack
• Data from your CRM or any other system

Thematic does not request permission to read channel history.

• Only to provide the service: deliver the register, answer questions, and send coverage updates to the people who asked for them.
• We never sell your data or share it with advertisers.
• What your team asks or follows is never added to Thematic’s register, and is not used to inform coverage for other customers.
• We do not use your data to train AI models.

• Thematic answers questions and writes coverage updates with AI models from Anthropic (Claude), through Anthropic’s commercial API. Under Anthropic’s commercial terms, API inputs and outputs are not used to train its models.
• Answers draw on Thematic’s register first. If web search is on, some answers may include public web results, labeled “From the web.” A workspace admin can turn web search off at any time.
• Every factual claim about a deal is checked against the register before it’s sent.

• In transit: all traffic is encrypted with TLS (HTTPS).
• Sign-in: passwordless sign-in links that expire after 15 minutes and work once. Sessions are signed and expire after 30 days.
• Secrets: Slack tokens and other credentials are stored only on our servers, outside our code repository.
• Access: production access is limited to Thematic’s administrator.
• Separation: each Slack workspace’s data, logs and settings are kept separately.

• Questions asked of Thematic in Slack are kept for 90 days to answer follow-ups and review answer quality, then deleted.
• Coverage settings are kept while your account is active.
• If your workspace uninstalls Thematic, we revoke its Slack tokens immediately and delete that workspace’s data within 30 days.
• When an admin removes a person, their coverage settings and sign-in are deleted.
• To request deletion, email deals@thematichq.com and we’ll confirm when it’s done.

Workspace admins can add or remove seats, choose which channels Thematic posts to, map channels to sectors, turn web search on or off, and pause or uninstall Thematic at any time.

If we confirm a security incident affecting your data, we’ll notify your admin within 72 hours with what happened, what data was involved, and what we’re doing about it.

Thematic does not hold SOC 2 or ISO 27001 certification today. We’re glad to complete your security questionnaire or join a call with your IT team.

deals@thematichq.com