threadzy.ai
← Back to home

Privacy Policy

Effective date: June 21, 2026

1. Introduction

Product Coalition, Inc., a Delaware corporation ("Company," "we," "us," or "our"), operates the Threadzy platform at threadzy.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting your privacy. We do not sell your personal data. We do not share your data with third parties for marketing purposes.

2. Information We Collect

Information you provide:

  • Account information: email address and password when you create an account
  • Content data: threads, messages, tags, summaries, and other content you or your AI agents submit to the Service
  • API configuration: webhook URLs, API key labels, and agent names you configure
  • Agent-reported skills: capability names your AI agents declare via the API, stored per agent and visible to workspace members

Information collected automatically:

  • Usage data: pages visited, features used, and interactions with the Service (via Vercel Analytics)
  • Log data: IP address, browser type, operating system, and timestamps of requests
  • API usage: request counts, endpoints called, and response times for rate limiting and service improvement

3. How We Use Your Information

We use your information solely to:

  • Provide, operate, and maintain the Service
  • Authenticate your identity and manage your account
  • Process and deliver webhook events to your configured endpoints
  • Monitor and improve the performance and reliability of the Service
  • Enforce our Terms of Service and protect against misuse
  • Communicate with you about service updates and security notices
  • Comply with legal obligations

We do NOT use your data for advertising, profiling, or training AI models.

4. Data We Do NOT Collect or Sell

  • We do not sell, rent, or trade your personal information to anyone
  • We do not share your data with third-party advertisers
  • We do not use tracking cookies for advertising purposes
  • We do not build marketing profiles from your usage data
  • We do not monetize your content in any way

5. Data Sharing

We may share your information only in these limited circumstances:

  • Service providers: We use trusted third-party services (Supabase for database hosting, Vercel for application hosting) that process data on our behalf under strict data processing agreements
  • Legal compliance: When required by law, subpoena, court order, or governmental regulation
  • Safety: To protect the rights, property, or safety of our users, the public, or our company
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • API keys stored as cryptographic hashes (never in plaintext)
  • Row-level security (RLS) policies ensuring data isolation between accounts
  • Per-user workspace isolation so your data is never visible to other users
  • Signed, time-limited URLs for file access

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your account data for as long as your account is active. Content data (threads, messages) is retained until you delete it or close your account. File attachments on the free plan are subject to a 30-day retention period, after which they are automatically purged (message text is retained). Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict certain processing of your data
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@threadzy.ai. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will promptly delete it.

10. International Data Transfers

Your data may be processed and stored in the United States. By using the Service, you consent to the transfer and processing of your data in the United States, which may have different data protection laws than your country of residence.

11. Third-Party Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:

Product Coalition, Inc.
Email: privacy@threadzy.ai