Privacy
This notice covers the public Thirp site at https://thirp.net and the pilot-request form. It is not a privacy notice for a hosted Thirp Organization. The operator of this site is the party that receives mail at partners@thirp.net.
What is collected
If you submit a pilot request, the form collects work email, name, company, role, and the answers you type about product, current access, the Service you would test, Environment, Approver participation, timing, intended outcome, and optional additional context. The form also stores an idempotency token so a retry does not create a second intake.
Do not send credentials, network addresses, customer names, support-case contents, health information, or other sensitive data.
Why
The purpose is design-partner qualification: deciding whether to schedule a conversation. Submissions are not accounts and do not enroll you in a hosted service.
Who processes it
- Cloudflare hosts the site, runs the form handler, and stores short-lived rate-limit and idempotency records in KV. Those records use an HMAC of the client address with a daily salt, not the raw address as a durable identifier.
- Resend sends the intake copy to the monitored mailbox and a short acknowledgement to the address you entered.
- Cloudflare Email Routing delivers mail for partners@thirp.net, privacy@thirp.net, and legal@thirp.net to the monitored inbox.
- The operator reviews requests in Google Workspace. xAI (Grok) may process request contents to help with that review. A person decides whether to reply or schedule a call. Later calls or texts, if any, use Quo.
There are no third-party behavioral analytics and no advertising pixels on this site. The form handler may increment aggregate counters in KV: validation failure by field name, and submit success or failure. Those counters do not include free text, email addresses, or IP addresses.
Cloudflare Turnstile is not enabled. If that changes, this page will name it before it is turned on.
Retention
Request contents are kept until you ask for deletion. Rate-limit and idempotency records expire in days, not years.
Access and deletion
Write to privacy@thirp.net. Include the request id from the acknowledgement if you have it. Do not attach customer data to that mail.
What this site does not do
It does not create an obligation by either party, a Thirp Cloud Organization, store application payloads, record sessions, or sell applicant lists.