Privacy Policy

1. Introduction

ThreadMaster, available at threadmaster.ai, is a product owned and operated by FastProducts LLC, a Wyoming limited liability company ("we," "us," "our," or the "Company"). The threadmaster.ai domain and the ThreadMaster brand are the property of FastProducts LLC. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the data practices described in this Privacy Policy, you should not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide directly to us, including:

• Account Information: Name, email address, username, and password when you create an account
• Profile Information: Additional information you may provide for your user profile
• Payment Information: Billing details processed through our payment provider Stripe (we do not store credit card numbers)
• Content Data: Thread content, templates, and preferences you create or save using our Service
• Communications: Information when you contact us for support or feedback

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Usage Data: Features used, threads generated, templates accessed, and interaction patterns
• Device Information: Browser type, operating system, device type, and unique device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies and Similar Technologies: Session cookies, preference cookies, and analytics cookies
• Analytics Data: Performance metrics and usage statistics through our analytics system

2.3 Information from Third Parties

• Payment Processors: Transaction information from Stripe regarding your subscription status. When you subscribe through the iOS or Android app, your purchase is processed by Apple (App Store) or Google (Google Play) under their terms. We receive your subscription status, product identifier, purchase and expiry dates, price and currency, and a pseudonymous app-user identifier via RevenueCat — never your card details.
• Authentication Providers: If you choose to authenticate using third-party services (if applicable)
• Connected Social Accounts: When you connect LinkedIn, we collect your profile ID, display name, profile picture, and access token to identify your connected profile and publish content you approve. The access token is stored encrypted. Your stored LinkedIn profile details and access token are removed when you disconnect.
• AI Services: Interaction data with OpenAI's API for content generation

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Maintain Our Service

• Create and manage your account
• Process your subscription and payments
• Generate AI-powered thread content
• Save and manage your templates and preferences
• Provide customer support

3.2 Improve and Develop Our Service

• Analyze usage patterns to improve functionality
• Develop new features and services
• Optimize content generation algorithms
• Conduct research and analysis

3.3 Communicate with You

• Send service-related announcements and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Provide information about new features or changes

3.4 Legal and Security Purposes

• Comply with legal obligations
• Protect against fraud and abuse
• Enforce our Terms of Service
• Protect our rights, privacy, safety, or property

4. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers that help us operate our Service:

• Stripe: For payment processing and subscription management
• Apple App Store: For in-app purchases on iOS. See Apple's Privacy Policy.
• Google Play: For in-app purchases on Android. See Google's Privacy Policy.
• RevenueCat: For subscription management and receipt validation for the mobile apps. See RevenueCat's Privacy Policy.
• Resend: For transactional email delivery. See Resend's Privacy Policy.
• Sentry: Error and crash reporting for the mobile apps. See Sentry's Privacy Policy.
• OpenAI: For AI-powered content generation (anonymized content only)
• Hosting Providers: For website and application hosting
• Analytics Providers: For usage analysis and performance monitoring

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Court orders or subpoenas
• Government requests
• Law enforcement requirements

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

4.4 Consent

We may share your information with your explicit consent for specific purposes.

5. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes described in this Privacy Policy:

• Account Information: Retained for the duration of your account and a reasonable period thereafter
• Content Data: Retained while you maintain an active account
• Payment Records: Retained as required for tax and accounting purposes (typically 7 years)
• Analytics Data: Retained in anonymized form for up to 2 years
• Legal Records: Retained as required by applicable laws

You may request deletion of your account and associated data at any time, subject to legal retention requirements.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: SSL/TLS encryption for data in transit
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Infrastructure: Industry-standard security measures for our servers and databases
• Regular Updates: Security patches and updates to maintain system integrity
• Incident Response: Procedures to detect, respond to, and report data breaches

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to access and receive a copy of your personal information in a structured, commonly used format.

7.2 Correction and Update

You can update or correct your account information through your account settings or by contacting us.

7.3 Deletion

You may request deletion of your account and personal information, subject to legal retention requirements. Deleting your account does not cancel an App Store or Google Play subscription — cancel it in your device's subscription settings.

7.4 Opt-Out

• Marketing Communications: Unsubscribe via the link in marketing emails or update preferences in account settings
• Cookies: Manage cookie preferences through your browser settings
• Analytics: Opt-out of analytics tracking through your account preferences

7.5 Do Not Track

Our Service does not currently respond to Do Not Track browser signals. However, you can manage tracking through cookie settings and account preferences.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

By using our Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at support@threadmaster.ai.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

11.1 Legal Basis for Processing

We process your personal data based on:

• Contract: To provide our Service under our Terms of Service
• Legitimate Interests: To improve our Service and communicate with you
• Consent: For marketing communications and optional features
• Legal Obligations: To comply with applicable laws

11.2 Your Rights

• Access your personal data
• Rectify inaccurate personal data
• Request erasure ("right to be forgotten")
• Restrict processing of your personal data
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with supervisory authorities

11.3 Deleting Your Data and Connected Social Account Data

You may request deletion of your data at any time by emailing support@threadmaster.ai from the email address associated with your account or by following the instructions at https://threadmaster.ai/data-deletion. If you have connected a Meta service (Facebook or Threads), disconnecting that service or initiating a data-deletion request from Meta triggers deletion of the data ThreadMaster received from that service. Disconnecting LinkedIn removes your stored LinkedIn profile ID, display name, profile picture, and encrypted access token. We honor deletion requests within 30 days.

12. Cookies and Tracking Technologies

12.1 Consent

On your first visit, a cookie banner lets you accept all, reject all, or choose per category. Third-party analytics and marketing cookies are set only after you opt in. First-party attribution cookies are set on visit under legitimate interest (see below). Your choice is stored in the tm_cookie_consent cookie for up to 12 months, and you can change it at any time via the "Cookie Settings" link in the site footer.

12.2 Types of Cookies We Use

• Essential Cookies: Required for basic Service functionality, including sessions, sign-in security (CSRF), and remembering your cookie preferences. Always active.
• Analytics Cookies: Google Analytics (_ga and related cookies) and PostHog collect aggregated usage data to help us improve the Service. Set only with your consent.
• Marketing Cookies: First-party attribution cookies (tm_first_touch, tm_last_touch — which campaign, referrer, or partner link brought you to the site, kept for 90 days) and the first-party journey cookie (tm_journey — which pages of our marketing site you visited before signing up, used to personalise your first thread and onboarding, kept for 90 days) are set on visit under legitimate interest and are not shared with third parties until you consent to consent-gated services. Affiliate referral cookies from Tolt (tolt_referral), used to credit partners who referred you, are set only with your consent.

12.3 Managing Cookies

You can change your consent choices at any time via the "Cookie Settings" link in the footer, and you can also control cookies through your browser settings. Note that disabling essential cookies may limit Service functionality.

12.4 Third-Party Cookies

With your consent, Google Analytics, PostHog, and Tolt (our affiliate platform) may set their own cookies. We encourage you to review their privacy policies.

13. Mobile Apps

Our mobile apps use the same account and data as our website. Device identifiers are used only for the subscription purchase flow and crash and error reporting through Sentry. We do not use advertising identifiers.

When you enable push notifications, we store a device push token. You can remove it by disabling notifications or deleting your account. Account deletion is available in the app under More → Account.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top
• Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer
FastProducts LLC (operator of ThreadMaster)
Mailing address:
701 Tillery St
Austin, TX 78702
USA
Privacy inquiries: support@threadmaster.ai
Legal / entity inquiries: info@fastproducts.io
Website: https://threadmaster.ai

For GDPR-related inquiries, EU residents may also contact our EU representative at: support@threadmaster.ai

16. Supplemental Privacy Notice for Specific Jurisdictions

Depending on your location, additional privacy rights and disclosures may apply. We comply with applicable local privacy laws and will provide jurisdiction-specific notices as required.