Privacy notice
This notice explains how Thrim, LLC handles information submitted through the Thrim Grid design-program form. Effective July 23, 2026.
Information we collect
The form asks for your name, work email, organization, optional role or title, primary mission type, a safety acknowledgement, and a message about your general search workflow. We also receive ordinary request metadata needed to deliver and protect the service, such as time, browser request headers, and network address.
Do not send operational or sensitive data
Do not submit emergencies, live incident details, subject information, evidence, criminal-justice information, medical information, credentials, or exact sensitive locations. The form is not monitored as an emergency channel and is not approved for operational information.
How we use the information
Thrim uses the submission to evaluate design-program fit, respond to you, schedule a workflow interview or prototype review, improve product research, protect the form from abuse, and maintain necessary business records. We do not sell contact-form information or use it for third-party behavioral advertising.
Service providers
Requests may pass through Cloudflare for network delivery and security and through Thrim's infrastructure hosting provider. Accepted submissions are delivered to and processed in Google Workspace. These providers process data on Thrim's behalf under their applicable service terms and may process it in the United States or other locations where they operate.
Abuse prevention
The form uses a hidden honeypot, duplicate detection, and request limits. For these controls, the service stores keyed, one-way hashes derived from network and submission characteristics together with timestamps and counters. It does not store form bodies in abuse logs. Active windows range from five minutes to 24 hours; an automated daily cleanup removes expired opaque records, including when the form is otherwise idle.
Retention
Contact messages may remain in Thrim's Google Workspace mailbox for up to 24 months. A smaller record may be kept longer when a design-partner or business relationship continues, or when law, security, or dispute-resolution needs require it. Information is deleted or de-identified when it is no longer reasonably needed.
Cookies and automated tracking
This site does not currently set cookies, run behavioral analytics, use a CAPTCHA, or provide cross-origin form access. Infrastructure providers may process standard request data necessary to deliver and secure the site.
Your choices
You may ask Thrim to correct or delete contact information, subject to applicable recordkeeping and security needs. Use the design-program form, select “Other,” and provide only the information necessary to identify your request. Do not include operational data.
Changes to this notice
Thrim may update this notice as the design program or service providers change. The effective date above will be updated when material revisions are published.