Privacy
What the platform records.
Effective September 28, 2026. Steelworks Software LLC, registered in Delaware, United States, operates Internalize.
Information we process
Internalize processes account details, submitted model content, adapter state, payment references, and operational metadata to provide the service. Clerk handles email-code authentication. We store account and project identifiers so we can enforce ownership, key permissions, and customer-specific memory routing.
Polar handles payment details as merchant of record. Internalize receives the payment and refund references needed to maintain your credit balance; we do not collect or store full card numbers or security codes.
Service providers
Vercel hosts the website and API. Convex stores account, project, usage, and execution records and coordinates model work. Thinking Machines' Tinker performs model inference and training and hosts private checkpoints. Clerk provides authentication, Polar provides payments, and PostHog provides product analytics. Necessary data is processed by these providers to perform their respective functions; this service does not currently offer a customer-selected data-residency region.
We use your learning content to create the memory versions requested for your project, not to train a shared Internalize model. Tinker describes its training-data policy in its service information.
Analytics
Product analytics include anonymous visits, navigation, errors, performance, and interaction events through PostHog. Authenticated activity is associated with an internal user and project ID. Session replay masks inputs and blocks model content and API secrets. Prompts, learning passages, model responses, passwords, and full API keys are excluded from analytics.
Advertising measurement
With your permission, we use the X Pixel and X Conversion API to measure visits, new-account signups, checkout starts, and paid credit purchases. X may receive its ad-click identifier, a one-way SHA-256 hash of your account email for matching, an opaque conversion identifier, event time, and the amount actually paid in USD. We do not send prompts, memories, model responses, API keys, project names, or payment-card details to X.
Ad measurement is off until you choose Allow. Use Ad privacy at the bottom of the page to change your choice. We also honor Global Privacy Control and Do Not Track signals. Declining does not prevent you from using Internalize. Withdrawing permission stops subsequent reporting and pending deliveries; it does not recall events already received by X. See X's privacy policy.
We retain the ad-click identifier and conversion delivery records for up to 30 days, and your advertising choice for up to 180 days. Purchases are reported from verified payment notifications; opening a checkout or returning to the site is not treated as a payment.
Retention
Job source payloads are removed from the control plane after terminal settlement. Convex temporarily stores the private token and training data required for execution and recovery. After a job settles, scheduled cleanup removes those temporary files. Unresolved operations retain their recovery evidence until reconciliation. Final responses and operational records remain available in authenticated activity records; clearing a transient payload does not delete those records.
Tinker stores paired training and serving weights with an explicit expiration; the initial retention window is 24 hours. Account, financial, audit, and support records may be retained to operate your account, resolve disputes, maintain security, and meet legal obligations. Provider backup and retention policies may also apply. Expiring a memory version is not a promise of immediate deletion from every backup.
Your choices and requests
You control which content your application submits and which project, customer, and memory a request uses. Avoid placing credentials or unnecessary personal data in prompts or learning content. A customer's tenant identifier should be an opaque application identifier, not an email address or other direct identifier.
For access, correction, deletion, account closure, or questions about processing, contact team@convergingthought.com. We verify the requester's authority before sharing or changing private records. Depending on where you live, you may have additional rights under applicable privacy law. We will explain any records we must retain when handling a deletion request.
Material changes will be reflected in this notice with an updated effective date.