> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pond.li/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy Policy

> How Pond handles your data

*Last updated: 10 February 2025*

## Who we are

Pond is operated by **Ladder Research Ltd.**, a company registered in England and Wales. For the purposes of data protection law, Ladder Research Ltd. is the data controller.

Contact: [ruthvik@ladder-research.com](mailto:ruthvik@ladder-research.com)

## What data we collect

| Data                        | Purpose                                                                                                                    |
| --------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
| **Email address**           | Account creation and authentication                                                                                        |
| **Content you add to Pond** | Providing the core product — storing, organising, and surfacing your library of artefacts, threads, notes, and connections |
| **Usage data**              | Analytics and error tracking to improve the product                                                                        |

## How we use your data

We process your data on the following legal bases (GDPR Article 6):

* **Contract** — to provide and maintain your Pond account and its features.
* **Legitimate interest** — to monitor errors, improve the product, and keep it secure.

We do **not** sell your data. We do **not** use your data to train AI models.

## Third-party services

We share data with the following processors, strictly to provide and improve Pond:

| Service                                              | What they receive                 | Purpose                                 |
| ---------------------------------------------------- | --------------------------------- | --------------------------------------- |
| [Supabase](https://supabase.com/privacy)             | Email, all content                | Database and authentication             |
| [OpenAI](https://openai.com/policies/privacy-policy) | Content (for embeddings)          | Semantic search and content embeddings  |
| [Anthropic](https://www.anthropic.com/privacy)       | Content (visible to Claude agent) | AI-powered features within your library |
| [PostHog](https://posthog.com/privacy)               | Usage data                        | Product analytics                       |
| [Sentry](https://sentry.io/privacy/)                 | Error data                        | Error monitoring and debugging          |

OpenAI and Anthropic receive content you have added to Pond in order to power AI features. We use their API services, which means your data is **not** used to train their models (per their API data usage policies).

## Cookies

We use cookies and similar technologies for authentication and analytics (via PostHog). These are functional and analytical — we do not use advertising cookies.

## Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your data from our systems within 30 days. Copies may persist in backups for a limited period.

## Your rights

Under UK GDPR, you have the right to:

* **Access** your personal data
* **Rectify** inaccurate data
* **Delete** your data ("right to be forgotten")
* **Export** your data in a portable format
* **Object** to processing based on legitimate interest
* **Withdraw consent** at any time (where consent is the legal basis)

To exercise any of these rights, email [ruthvik@ladder-research.com](mailto:ruthvik@ladder-research.com).

You also have the right to lodge a complaint with the [Information Commissioner's Office (ICO)](https://ico.org.uk/).

## Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or through Pond.