Legal

Privacy Policy

Last updated 14 August 2026

THRUM (“we”, “us”) is an AI Visibility & Digital Authority Studio operated from the United States. This page describes how we handle information collected through thrumagency.com.

Who we are

THRUM is operated by Scott Cook, Jeff Black, and Ash Warren. Contact: hello@thrumagency.com.

TODO: confirm legal entity name, mailing address, and whether THRUM is a DBA of another company.

What we collect

When you use the diagnostic request form, we collect:

• The company website or domain you submit
• The email address you submit
• The date and time of the request

A hidden “company” field is present only as a spam honeypot. If a bot fills it, we discard the submission and do not store it as a lead.

We do not ask for payment information on this site.

How we use it

We use the domain and email solely to run a first read of how major AI systems currently describe the submitted organization, and to reply about whether a full AI Visibility Diagnostic is a fit. We do not sell this information. We do not share it with unrelated third parties for their marketing.

Who processes it

Form submissions are emailed to us via Resend, our email delivery provider. The site is hosted on Vercel. Vercel Web Analytics may record anonymized page views (pages visited, referrer, approximate geography). We do not use advertising cookies or third-party ad networks.

TODO: confirm whether Vercel Analytics is configured in cookieless / anonymized mode, and list any other processors (e.g. DNS, error logging) once they exist.

Retention

We keep diagnostic-request emails for as long as needed to reply and, if you proceed, to perform the work. If you do not proceed, we delete or archive the request on a reasonable cycle.

TODO: set a specific retention window (e.g. 24 months for unconverted inquiries) and a deletion process.

Your choices

Email hello@thrumagency.com to ask what we hold about you, to correct it, or to ask us to delete it. If you are in a jurisdiction with additional privacy rights, we will honor applicable requests.

TODO: counsel review for GDPR / CCPA applicability, DPO, and lawful-basis language if EU/UK traffic is material.

Children

This site is intended for business contacts. We do not knowingly collect information from children.

Changes

If this policy changes, we will update the date above. Material changes will be noted on this page.