Privacy Policy

1. Who We Are

Thread AI is operated by Simple Sprout, LLC. When this policy refers to “Thread,” “we,” “us,” or “our,” it means Simple Sprout, LLC and the Thread AI service available at yourthread.ai.

2. What Thread AI Does

Thread AI is a personal AI assistant delivered via SMS, WhatsApp, and a web application. It learns about the people in your life, your schedule, and your preferences to provide personalized assistance — meeting briefs, reminders, answers to questions, and more.

3. Information We Collect

We collect the following categories of information:

• Account information — phone number, name, email address, and timezone when you sign up.
• Messages — SMS, WhatsApp, and web messages you send to and receive from Thread AI.
• Memories — facts, observations, preferences, and relationship details extracted from your conversations by our AI to personalize your experience.
• Calendar and email data — when you connect a Google or Microsoft account, we access calendar events and email metadata to provide meeting briefs and contextual assistance.
• Billing information — payment details are collected and processed by Stripe. We store your subscription tier and usage data but never store full credit card numbers.
• Usage data — interactions with the service, feature usage, and error logs to improve reliability.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Thread AI assistant.
• Generate personalized responses, meeting briefs, reminders, and suggestions based on your memories and connected data.
• Resolve entities (people, places, events) mentioned in your conversations to build your personal knowledge graph.
• Process billing and enforce usage limits for your subscription tier.
• Send you SMS and WhatsApp messages as part of the assistant experience.
• Detect and prevent fraud, abuse, and security incidents.

5. Third-Party Services

Thread AI integrates with the following third-party services to deliver the product. Each processes data only as needed to provide their respective service:

• Twilio — SMS and WhatsApp message delivery.
• OpenRouter — routes AI requests to large language model providers (such as OpenAI, Anthropic, and Google) to generate assistant responses.
• OpenAI — generates text embeddings used for semantic memory search.
• Supabase — database hosting and authentication infrastructure.
• Stripe — payment processing and subscription management.
• Google & Microsoft — calendar and email integration when you choose to connect your account.

We do not sell your personal information to third parties. Data shared with third-party services is limited to what is necessary to provide the Thread AI service.

6. Data Retention

• Memories are stored until you explicitly delete them or delete your account.
• Message captures (raw SMS, WhatsApp, and web messages) are retained for the duration of your account to provide continuity of service.
• Calendar and email data is cached temporarily for processing and is refreshed on each sync cycle.
• When you delete your account, all personal data including memories, captures, and connected account data is permanently deleted within 30 days.

7. Your Rights

Depending on your location, you may have the following rights under applicable privacy laws including the GDPR and CCPA:

• Access — request a copy of the personal data we hold about you.
• Deletion — request that we delete your personal data.
• Export — request a portable copy of your data.
• Correction — request that we correct inaccurate personal data.
• Opt-out — opt out of data processing for certain purposes.

To exercise any of these rights, contact us at hello@yourthread.ai. We will respond within 30 days.

8. SMS and Messaging

• By providing your phone number, you consent to receiving SMS and WhatsApp messages from Thread AI as part of the assistant service.
• Message frequency varies based on your usage and configured notifications.
• To opt out of SMS, reply STOP to any message from Thread AI. You can re-subscribe at any time by texting START.
• Text HELP for assistance.
• Standard message and data rates may apply.

9. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) and at rest for sensitive data such as OAuth tokens.
• Row-level security (RLS) ensuring tenant isolation of user data.
• Application-level authorization checks on every API request.
• Webhook signature verification for all inbound integrations.

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Thread AI is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you via SMS or through the Thread AI web application. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this privacy policy or our data practices, contact us at: