Data Report Card · Thinking Machines
Thinking Machines Data Report Card
AI assistant · Inkling Playground / Tinker · Thinking Machines Lab, Inc. (San Francisco)
Data
Practices
Practices
1Access1Portability1Friction1Deletion2Sells2Trains AI
=
C
8/12
Agent
Readiness
Readiness
1Access
1Portability
0API access
=
D
2/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · some cells re-verified Aug 2026 · policies are checked weekly for changes · stated — every cell is read from Thinking Machines's published policy; none has been tested (run by us) yet.
1Accessstated
The Website Privacy Notice lists rights you “may” have “depending on where you live”, including access; the only documented path is emailing privacy@thinkingmachines.ai — no portal, and no stated scope or timeline.
Thinking Machines Website Privacy Notice — Your personal information rights · accessed Aug 2026 ↗1Portabilitystated
No export tool is documented on any surface. “Transfer a copy of your personal information to a third-party” sits in the general rights list for all users — request-only, by email to privacy@thinkingmachines.ai.
Thinking Machines Website Privacy Notice — Your personal information rights · accessed Aug 2026 ↗1Frictionstated
Every right runs through privacy@thinkingmachines.ai with identity verification; “these rights are not absolute and we may decline your request where permitted by law”, and no response timeline is stated. An email appeal path exists; no dark patterns are documented.
Thinking Machines Website Privacy Notice — Your personal information rights · accessed Aug 2026 ↗1Deletionstated
Deletion is by email request, declinable “where permitted by law”; retention runs “for as long as reasonably necessary” with no post-deletion purge timeline stated.
Thinking Machines Website Privacy Notice — retention / rights · accessed Aug 2026 ↗2Sells / sharesstated
The notice states “We do not ‘sell’ or ‘share’ personal information as those terms are defined in the CCPA nor have we done so in the prior 12 months” — the plain no-sell shape, with no advertising-partner carve-outs.
Thinking Machines Website Privacy Notice — Additional U.S. state disclosures · accessed Aug 2026 ↗2Trains AIstated
The Service Terms state “we will not use, copy or share any of your Customer Content (including your Customer Datasets) to develop or improve our technologies. For instance, we will not use your Customer Content for model training or fine-tuning” — no-train by default, with no free or beta carve-out. The separate Free Research API tier (served via OpenRouter) does train on Prompts and Outputs; it is a different service under its own terms.
Thinking Machines Service Terms of Use — Customer Content · accessed Aug 2026 ↗0API access — feeds Agent Readiness, not the /12stated
Tinker's API serves fine-tuning and inference; there is no consumer-grantable OAuth API for an agent to fetch your own account or Playground data — the self-data path is an email request to privacy@thinkingmachines.ai.
Tinker Documentation (developer-facing) · accessed Aug 2026 ↗Graded 2026-08-31 against the Thinking Machines Website Privacy Notice (last updated May 19, 2026) and the Service Terms of Use (last updated Jan 10, 2026). Consumer surface = the Inkling Playground in the Tinker console, operated by Thinking Machines Lab, Inc., a US company. Every privacy right runs through privacy@thinkingmachines.ai — no portal, no export tool, no stated response timeline. The Service Terms carry an unqualified no-train commitment covering all Prompts and Outputs. A second lane exists and grades the other way: the TML Free Research API Tier (Inkling served free via OpenRouter, the only Exhibit B platform; ToS and Privacy Notice both last updated Aug 20, 2026) takes a worldwide, irrevocable, perpetual licence to Prompts and Outputs “to train, fine-tune, evaluate, and improve the Company Models and other AI models”, retained “during and after the Term”, with no stated opt-out. That endpoint is outside the graded surface; the Trains cell scores the Playground. This company also publishes its models as open weights. Running them yourself, or through another host, is not governed by this policy — this grade describes Thinking Machines' own service. All cells stated, not tested.
Events
Breaches, policy changes, and export-format changes we’ve recorded at Thinking Machines — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →
No events on record for Thinking Machines.
Grade history
Every change to this company’s grade since it was first published, and why. All grade changes →
No changes since this grade was first published in Jun 2026.
How to request your data from Thinking Machines
- Go to https://thinkingmachines.ai/legal/privacy/ — Thinking Machines's data-request entry point.
- All rights via privacy@thinkingmachines.ai — no portal, no export tool.
- Expected wait: email requests with identity verification; “we may decline your request where permitted by law”; no stated response timeline — Thinking Machines's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact Thinking Machines — Privacy: mailto:privacy@thinkingmachines.ai.
These steps reflect Thinking Machines's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.