Privacy Policy

Introduction

This Privacy Policy explains how Thought Canopy ("Thought Canopy", "we", "us", or "our") collects, uses, shares, and protects your personal data when you visit thoughtcanopy.com (the "Site") and use its features.

Thought Canopy is operated by The Social Eye , a company registered in India (the "Company"). The Company is the data controller / data fiduciary responsible for your personal data.

We respect your privacy and are committed to handling your data lawfully and transparently. This policy is designed to meet our obligations under the EU General Data Protection Regulation (GDPR) and the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and India's Digital Personal Data Protection Act, 2023 (DPDP Act).

By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Site.

Who This Policy Applies To

This policy applies to all visitors and users of the Site, including readers, newsletter subscribers, and people who contact us. It does not apply to third-party websites we link to, which are governed by their own privacy policies.

Information We Collect

We collect only the data we need to operate the Site and provide our content and services.

Information You Provide Directly

Newsletter subscription — your email address when you subscribe.
Contact form — your name, email address, subject, and message when you contact us.
Lead magnets / downloads — your email address when you request a gated resource.

Information Collected Automatically

When you visit the Site, certain data is collected automatically through cookies and similar technologies (see our Cookie Policy):

IP address and approximate location derived from it
Browser type, device type, operating system, and screen settings
Pages viewed, time and date of visit, time spent, and referring URLs
Interaction events (for analytics and product improvement)

Pseudonymous Identifiers

Reactions — when you react to a post, we store a random anonymous identifier ("anonId") generated in your browser's local storage, together with the post and your reaction. This identifier is not linked to your name or email.
Page views — we keep an aggregate per-post view count. No personal data is stored for view counts.

Information We Do Not Collect

We do not operate user accounts or passwords, and we do not knowingly collect special-category / sensitive personal data (such as health, biometric, or financial-account data). We do not intentionally collect data from children (see "Children's Privacy").

How We Use Your Information

We use personal data for the following purposes:

To send the newsletter you subscribed to and deliver requested resources
To respond to your enquiries submitted through the contact form
To operate, maintain, secure, and improve the Site and its content
To measure traffic and understand how the Site is used (analytics)
To display and measure advertising, including personalised advertising where you have consented (see "Analytics and Advertising")
To detect, prevent, and address fraud, abuse, and security issues
To comply with legal obligations and enforce our Terms of Service

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Consent — for sending marketing emails, and for analytics, advertising, and other non-essential cookies. You may withdraw consent at any time.
Contract / steps prior to a contract — to deliver a resource or service you request.
Legitimate interests — to keep the Site secure, prevent abuse, and understand aggregate usage, balanced against your rights.
Legal obligation — where we must process data to comply with applicable law.

Cookies and Similar Technologies

We use cookies and similar technologies for essential functionality, analytics, and advertising. Non-essential cookies are loaded only after you consent through our cookie banner. Full details — including the specific tools we use and how to manage your choices — are in our Cookie Policy.

Analytics and Advertising

We manage third-party tags through Google Tag Manager. Depending on your consent, these may include:

Analytics — Google Analytics 4 and Microsoft Clarity, to understand site usage and improve the experience.
Advertising and conversion measurement — Google AdSense, Taboola, Meta Pixel, and Google Ads conversion tracking, to display ads and measure their effectiveness.

These providers may set their own cookies and process data (including online identifiers and IP address) as independent or joint controllers under their own privacy policies. Where required, personalised advertising is enabled only with your consent; if you decline, we instruct Google AdSense to serve non-personalised ads.

You can control how Google uses your data at Google Ads Settings and adjust Meta's controls in your Meta account settings. For more on these providers, see:

Google: policies.google.com/privacy
Microsoft: privacy.microsoft.com
Meta: facebook.com/privacy/policy
Taboola: taboola.com/policies/privacy-policy

Affiliate Links

Some posts contain affiliate links. If you click an affiliate link and make a purchase, the relevant merchant or network may set cookies and we may earn a commission at no extra cost to you. See our Disclaimer for our full affiliate disclosure.

We do not sell your personal data for money. We share data only as described below:

Service providers (processors) who help us run the Site, including:
- Cloudflare — hosting, content delivery, and security
- Neon — managed PostgreSQL database (stores subscriber records, reactions, and aggregate view counts)
- Resend — sending transactional and newsletter emails and managing our subscriber audience
- Google, Microsoft, Meta, and Taboola — analytics and advertising, as described above
Legal and safety — to comply with applicable law, legal process, or enforceable governmental request, and to protect our rights, our users, and the public.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information for monetary value. However, the use of advertising and analytics cookies that share online identifiers with third parties may be considered "sharing" for cross-context behavioural advertising, or a "sale", under the CCPA/CPRA. You can opt out of such sharing by declining advertising cookies in our cookie banner. We do not knowingly sell or share the personal information of consumers under 16 years of age.

International Data Transfers

We operate from India and use service providers that may store and process data outside your country, including in the United States and the European Union. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy mechanism, as applicable.

Data Retention

We keep personal data only as long as necessary for the purposes set out in this policy:

Newsletter subscribers — until you unsubscribe or ask us to delete your data.
Contact messages — for as long as needed to handle your enquiry and a reasonable period thereafter.
Analytics and advertising data — for the retention periods set by the respective providers.

Aggregate, pseudonymous, or anonymised data may be kept for longer as it does not identify you.

How We Protect Your Information

We use administrative, technical, and organisational measures designed to protect your personal data, including encrypted transport (HTTPS) and access controls with our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Subject to applicable law, you may have the following rights over your personal data:

Access — request a copy of the personal data we hold about you.
Rectification / correction — ask us to correct inaccurate or incomplete data.
Erasure / deletion — ask us to delete your data.
Restriction and objection — restrict or object to certain processing, including direct marketing.
Portability — receive your data in a portable format.
Withdraw consent — withdraw consent at any time, without affecting prior lawful processing.

For California residents (CCPA/CPRA): you have the right to know, delete, and correct your personal information, to opt out of the "sale" or "sharing" of personal information, and not to be discriminated against for exercising your rights.

For residents of India (DPDP Act): you have the right to access, correction, and erasure of your personal data, the right to grievance redressal, and the right to nominate another person to exercise your rights in the event of death or incapacity.

To exercise any right, email us at hello@thoughtcanopy.com. We will verify your request and respond within the timeframe required by applicable law. You may unsubscribe from emails at any time using the link in any email.

You also have the right to lodge a complaint with your local data protection authority (such as the Data Protection Board of India, your EU/UK supervisory authority, or the California Privacy Protection Agency).

Grievance / Data Protection Contact

In accordance with the DPDP Act and applicable rules, you may contact our Grievance Officer with any concern about how we handle your personal data:

Grievance Officer, Thought Canopy (operated by The Social Eye)
Email: hello@thoughtcanopy.com

We will acknowledge and address grievances within the timeframes required by law.

Children's Privacy

The Site is not directed to children. We do not knowingly collect personal data from children under the age of 16 (or the minimum age set by your local law). If you believe a child has provided us personal data, contact us at hello@thoughtcanopy.com and we will delete it.

Third-Party Links

The Site contains links to third-party websites, advertisers, and affiliate merchants. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date below and, for material changes, provide a more prominent notice. Your continued use of the Site after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at hello@thoughtcanopy.com.

Last Updated: June 22, 2026