Privacy Policy

• Account information: your name, email address and the account identifiers of the provider you sign in with (such as Microsoft or Google), and your team and role in Threadship.
• Microsoft 365 data your organization connects: the email (with attachments) received by the agent's Microsoft 365 account, and files in the OneDrive or SharePoint folders an admin chooses. An admin approves this access for your organization in Microsoft, and we use it only through the agent's account. The permissions involved are listed on our Security page.
• Content you add in Threadship: chat messages, answers to the agent's questions, team memory, shipment details and settings.
• Product and website usage: how you use threadship.ai and the Threadship app (pages visited, actions such as signing up or connecting the agent's account), through PostHog and Cloudflare Web Analytics. See section 9.
• Demo requests: if you book a demo, your name, company and work email, collected through Google Forms, so we can contact you about Threadship.

We store the shipment information the agent extracts (for example dates, references and parties), links to the emails and files it came from (message and file IDs, subject, sender and date), and documents the agent files into your own folders. We don't keep a copy of your mailbox or your files: the agent reads them through Microsoft when a task needs them.

We use information to provide the service your organization asked for: reading and filing shipment mail and documents, keeping shipment records and connected spreadsheets up to date, drafting emails, answering your team, and remembering how your team works. We also use it to secure the service, prevent misuse, troubleshoot and support you.

We don't sell information, use it for advertising, or use your organization's content to train AI models. Our staff look at your content only with your permission, when needed for security or to investigate misuse, or when the law requires it.

The agent runs on Anthropic's Claude models through Anthropic's API. The content a task needs (for example an email, its attachments, the shipment record and the team memory) is sent to Anthropic to produce the agent's response. Under Anthropic's commercial terms, that content is not used to train their models.

We share information only with providers that help us run Threadship, under contracts that limit their use of it. They include:

• Cloud hosting and database (in the United States)
• An AI model provider (Anthropic)
• Background job processing
• Email delivery for notifications to team members
• Website hosting and analytics (Cloudflare)
• Product analytics (PostHog, in the United States)
• Demo requests (Google Forms)

A current list of these providers is available on request at support@threadship.ai.

We may also disclose information when the law requires it, to protect the rights and safety of our users or Threadship, or as part of a merger or acquisition, in which case this policy continues to apply to it.

• The agent's working transcript for each task is encrypted and deleted after 30 days.
• Shipment records, chat messages and team memory are kept while your organization uses Threadship.
• When your organization stops using Threadship, an admin can ask us at support@threadship.ai to delete its data. We delete it, except what we must keep by law.

To stop the agent's access to Microsoft 365, see “Revoking access” on our Security page.

We use technical and organizational safeguards described on our Security page, including encryption in transit and at rest. No online service can guarantee absolute security.

Your organization decides who joins its team and what the agent can reach. Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to its use. Email support@threadship.ai. Where we process information on behalf of your organization, we may refer your request to it.

We use PostHog to understand how people use threadship.ai and the Threadship app, so we can improve them. It sets a first-party cookie on threadship.ai and its subdomains, so a visit to the website and a later sign-in to the app count as the same person. It receives the pages you visit, the referring page, your browser and device type, approximate location from your IP address, and actions such as signing up, creating an organization or connecting the agent's account. Once you sign in, it's linked to your account (your name, email, organization and team).

PostHog may also record how you navigate pages (session replay). On the website, form fields are masked. In the app, all text, form fields and images are masked, and nothing is recorded inside a team, where your emails, files and shipments are shown. PostHog never receives the content of your emails, files or shipments.

We also count page views with Cloudflare Web Analytics, which doesn't use cookies. Cloudflare, which serves the site, may set a cookie needed to protect it from automated traffic. We don't use cookies for advertising.

The Threadship app uses cookies needed to sign you in and keep you signed in. You can block cookies in your browser; analytics then stops, but sign-in won't work without them.

Threadship stores your data in the United States. Some of our service providers may process it in other countries, where data protection laws may differ from yours.

Threadship is for businesses and is not directed at children under 16.

We'll update this policy as Threadship changes, and show the new date at the top. For significant changes we'll also tell admins by email or in the app. Contact: Threadship, Inc., support@threadship.ai.