Skip to content

PRIVACY.md

Latest commit

 

History

History
47 lines (30 loc) · 3.47 KB

PRIVACY.md

File metadata and controls

47 lines (30 loc) · 3.47 KB
Raw

Privacy

Thesis runs entirely on your machine. There are no Thesis servers, no telemetry, and no analytics. The repo author cannot see what tickers you analyze.

What data leaves your computer

When you run /analyze TICKER, the following network calls happen:

  • SEC EDGAR (sec.gov) — fetches public filings (10-K, 10-Q, DEF 14A, Form 4, Form 13F). The ticker you analyze is sent in the URL. Identifies as Thesis CLI/0.1 via User-Agent. No personal data.
  • Yahoo Finance (query1.finance.yahoo.com) — fetches stock prices, analyst estimates, peer quotes. Anonymous; ticker in URL.
  • Anthropic (api.anthropic.com) — agent prompts and your data packet are sent to Claude through your Claude Code subscription. Subject to Anthropic's privacy policy. The ticker, financial data, and any context the agent reasons over passes through Anthropic's servers.
  • Alpha Vantage (alphavantage.co) — only if you provided a key. Used as a fallback for earnings transcripts not bundled in the repo. Your key is sent in the URL.

What data stays on your computer

  • Reports: ~/thesis/reports/{TICKER}/
  • Pipeline scratch state: ~/thesis/cache/
  • Optional config (account email, AV key): ~/thesis/config.json

Account sync (optional)

Account sync is off unless you configure a Thesis API key in ~/thesis/config.json (via npm run setup). The key is what turns it on:

  • No API key — nothing is ever sent to thesis-investing.com. /analyze skips the sync step silently and your reports never leave your machine.
  • API key configured — at the end of each /analyze TICKER run, your generated reports are automatically pushed to your account at thesis-investing.com (POST api.thesis-investing.com/v1/reports). The ticker, company name, and report contents are sent. You can also push on demand with /inject TICKER.

Re-running a ticker you've already synced updates the existing report on your account instead of creating a duplicate. To stop syncing, remove apiKey from ~/thesis/config.json.

Customizing your User-Agent

By default, Thesis identifies itself to SEC as Thesis CLI/0.1 (+https://github.com/kghoff/thesis). If SEC ever needs to contact someone about your traffic, they'll file a GitHub issue.

If you're running heavy queries and want SEC to contact you directly, set userAgent in ~/thesis/config.json:

{
  "userAgent": "MyResearch admin@example.com"
}

Disclaimer

Not investment advice. Thesis is an AI-powered research tool for educational and informational purposes only. Reports are generated by large language models and may contain errors, hallucinations, outdated data, or misinterpretations of financial filings. Nothing produced by Thesis constitutes investment advice, financial advice, legal advice, tax advice, or a recommendation to buy, sell, or hold any security. The author is not a registered investment advisor. Always conduct independent research and consult a qualified financial advisor licensed in your jurisdiction before making investment decisions. You assume all risk for any decisions made using this tool or its outputs. Past performance is not indicative of future results.

Thesis is not affiliated with, endorsed by, or sponsored by any investment methodology, author, fund, or organization referenced or implied in its outputs. All trademarks and methodologies referenced belong to their respective owners.

See README for the full disclaimer placement.