Privacy Policy
Effective Date: October 1, 2025
1. Introduction
ThreadLock ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (optional)
- Password (encrypted)
- Account preferences
2.2 Content and Uploads
We collect and store the information you provide when using the Service, including:
- Journal entries and notes
- Uploaded documents and files
- Timestamps and metadata
- AI-generated suggestions and responses
2.3 Usage and Log Data
We automatically collect certain information when you use the Service:
- IP address
- Browser type and version
- Device information
- Pages visited and features used
- Time and date of access
- Referring website addresses
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your subscription and payment
- Generate AI-assisted content and suggestions
- Create tamper-evident timestamps for your entries
- Improve and optimize the Service
- Communicate with you about updates, security alerts, and support
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
4. Third-Party Service Providers
We use the following third-party service providers to operate the Service:
4.1 Firebase (Google)
We use Firebase for authentication, data storage, and hosting. Firebase may collect and process data as described in Google's Privacy Policy. Data is stored in Firebase's secure cloud infrastructure.
4.2 Stripe
We use Stripe for payment processing. Stripe collects and processes payment information according to its Privacy Policy. We do not store your full credit card information on our servers.
5. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal bases for processing your personal data include:
- Contract: Processing necessary to provide the Service you've subscribed to
- Consent: You have given clear consent for us to process your data for specific purposes
- Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention)
- Legal Obligation: Processing necessary to comply with legal requirements
6. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal obligations)
- Portability: Request transfer of your data to another service
- Objection: Object to processing of your data
- Restriction: Request restriction of processing
- Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
To exercise these rights, please contact us at info@threadlock.ai.
7. Data Retention
We retain your personal data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or regulatory purposes.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.
For EEA users, we rely on Standard Contractual Clauses approved by the European Commission for data transfers outside the EEA. See our Data Processing Agreement for more details.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
10. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.
11. Data Security
We implement appropriate technical and organizational security measures to protect your data, including:
- Encryption in transit (TLS/SSL)
- Encryption at rest
- Regular security audits
- Access controls and authentication
- Secure backup procedures
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date." We encourage you to review this Privacy Policy periodically.
13. Contact Information
If you have any questions about this Privacy Policy, please contact us at:
Email: info@threadlock.ai
Address: 16200 SW Pacific Hwy, Suite H PMB 1046, Tigard, OR 97224, United States