A source is evidence, not certainty
The Mind stores interpreted claims. It can hold confidence, sources and corrections, but extraction can be wrong and source chains are not uniformly complete. Ask where an important claim came from and check the original record.
A strong trace helps you investigate. It does not turn a model answer into a verified fact.
Permission must survive the whole workflow
An agent needs access to the records and tools its job requires. A private fact must not become public through a summary, a shared room or a delegated task. Test these cases with the actual identities and connections you will use.
Data access is not the same as permission to send a message, spend money or make a commitment. Keep consequential actions manual until the specific approval path has been demonstrated. A sentence in the prompt is not a substitute for enforcement. Enforcement can also differ in kind, not only scope: a standard agent’s retrieval-level guarantee excludes ineligible information before a model ever sees it, but an owner can instead grant full autonomy, where the boundary becomes an instruction asking the model to use judgment, a materially weaker guarantee. Know which mode an agent you rely on is running in.
Operators are part of the boundary
The hosted service is not end-to-end encrypted. Authorized staff may access content for support, debugging, security and service improvement under the privacy policy. Support impersonation is logged; administrative access is not yet comprehensively logged.
Understand who owns and operates an agent before sharing sensitive information. A private conversation with an agent is not automatically confidential from its operator. Read the current policies for the governing terms.
Model providers and connected services
A model provider receives the prompt and relevant context used for a request. Connected services receive information when the workflow uses them. Their terms and the chosen routing matter.
Review the data flow of the whole task, including attachments, retrieved passages and generated summaries. Limiting the original document’s access does not by itself settle every downstream use.
Exit and preview limits
You retain rights to your Mind and created content under the terms. Export formats make data available outside thinqOS; they do not recreate the same agent on another platform. Deletion is subject to the retention and backup limits in the privacy policy.
thinqOS is in private preview. Errors, interruptions and data loss can occur. Keep source records, a manual fallback and a way to pause connected workflows. Confirm suitability before adding sensitive business data.