Last updated: August 10, 2026
Thalamus LLC (“Thalamus,” “we,” or “us”) builds legislative intelligence software for government affairs professionals. This Privacy Policy explains what information we collect from visitors to thalamusbills.com and users of the Thalamus platform, how we use it, and the choices you have about it.
We are based in Salem, Oregon. If you have questions about this policy or want to exercise any of the rights described below, email privacy@thalamusbills.com. We respond within 30 days.
Information we collect
From the marketing site
When you submit the demo request form on thalamusbills.com, we collect the email address you provide. If you choose to share additional details — your name, organization, role, or notes about your interests — we collect those too. We also record the IP address the submission came from for spam-prevention and abuse-investigation purposes.
From the Thalamus platform (when you have an account)
If you have an account on the Thalamus app at app.thalamusbills.com, we collect:
- Account information — name, email, password hash, organization affiliation, and role assignments.
- Usage data — bills you track, clients you create, hearings you view, AI queries you submit, reports you generate.
- Content you upload — client documents, website URLs you ask us to scan, transcript files you import.
- Technical logs — HTTP request metadata, error reports, performance traces. We do not record session replays.
Information we do not collect
We do not use tracking pixels, advertising cookies, or fingerprinting scripts on the marketing site. We do not currently use cookies on this site at all. The Thalamus app uses a session token stored in your browser to keep you logged in; that is strictly functional and is not shared with any third party.
How we use information
We use the information described above to:
- Respond to your demo request and schedule a private demonstration.
- Provide, operate, and improve the Thalamus platform.
- Generate AI-assisted analysis on your behalf when you use Thalamus features that invoke our AI vendors.
- Send transactional email related to your account, requests, or reports.
- Detect, investigate, and prevent fraud, abuse, or security incidents.
- Comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.
We do not sell or rent personal information. We do not use your data to train any generally-available AI model.
Third-party services
We share specific data with vendors that help us deliver Thalamus. Each is contractually obligated to handle data in line with this policy. The list, current as of the date above:
- Microsoft Azure — hosts the application, database, and stored files. Data is encrypted in transit and at rest.
- SendGrid (Twilio Inc.) — delivers transactional email (demo confirmations, reviewer invites, reports).
- Slack — receives internal notifications when you submit a demo request, so our sales team can respond promptly.
- Stripe — processes subscription payments when you sign up for a paid plan. Thalamus never stores your card details; Stripe collects and handles them under its own privacy policy, and acts as merchant of record for tax purposes.
- Anthropic — processes prompts and content you submit to Thalamus AI features (bill analysis, Ask Cortex, hearing summaries). Anthropic does not retain inputs for training.
- AssemblyAI — transcribes publicly-available legislative hearings.
- Brandfetch — supplies organization logos when you add a new client.
We also incorporate public data from the Oregon Legislature’s OData service. No personal information flows to the Oregon Legislature from our use of their public APIs.
How long we keep information
- Demo requests — retained for 24 months from the submission date, then deleted unless you have an active relationship with us.
- Account data — retained while your account is active and for a reasonable period afterward to satisfy legal, accounting, and audit obligations.
- Logs and analytics — retained for up to 90 days for operational and security purposes.
- Backups — database backups roll over on a standard schedule. Deleted records persist in backup snapshots until the snapshots themselves age out.
Your rights and choices
Regardless of where you live, you can ask us to:
- Tell you what personal information we hold about you.
- Correct inaccurate information.
- Delete your information.
- Stop processing your information for marketing purposes.
- Export a copy of your information in a portable format.
Send requests to privacy@thalamusbills.com. We respond within 30 days. For deletion requests we may need to retain limited information (for example, the fact that you asked us to delete) for legal and audit purposes.
California residents have additional rights under the California Consumer Privacy Act, including the right not to be discriminated against for exercising those rights. To make a CCPA request, email the same address.
International data transfers
Thalamus is operated from the United States. If you visit the marketing site or use the platform from outside the United States, information about you may be transferred to and processed in the United States. By using Thalamus you consent to this transfer.
Children
Thalamus is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@thalamusbills.com and we will delete it.
Security
We use industry-standard safeguards: TLS for all network traffic, encryption at rest for stored data, password hashing with PBKDF2, and least-privilege access controls for our team. No system is perfect; if we ever experience a data breach affecting your information, we will notify you in line with applicable law.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date at the top, and we will notify account holders by email when a change materially affects how we handle account data.
Contact
Thalamus LLC
Salem, Oregon, USA
privacy@thalamusbills.com