1. What information we collect

A. Information you provide to us

• Account information: name, email, workspace/company name (if provided)
• Support and communications: messages you send to support, feedback, and feature requests
• Billing information (if applicable): we don't store full payment card details; payments are handled by payment processors (e.g., Stripe or others you choose)

In short: you can use ThreadJet with minimal personal information. Most of what you "provide" is simply your email + support messages.

B. Information we collect automatically (usage + diagnostics)

When you use the Services, we may collect:

• Device and app data: browser type/version, extension version, OS, language
• Log and usage data: IP address, timestamps, feature usage, clicks/actions inside the extension, error logs, performance metrics
• Security signals: abuse prevention indicators, rate limits, suspicious activity markers

In short: this helps us keep ThreadJet reliable, secure, and fast.

C. LinkedIn data processed to provide the service

ThreadJet processes LinkedIn messaging data to deliver inbox features. Depending on what you use, this may include:

• Conversation lists and threads
• Message content (DM text)
• Basic metadata (timestamps, thread IDs, participant identifiers, read/unread status)
• Profile data that appears in the message UI (e.g., name, headline) to help you identify people and keep context

Important: We aim to minimize what we collect and process. We access and process LinkedIn data only to provide the features you choose to use.

2. How we use your information

We use information to:

• Provide and operate ThreadJet features (triage, search, folders, reminders, workflows)
• Run AI features you request (draft replies, summaries, categorization, follow-up suggestions)
• Authenticate you and maintain the Service
• Troubleshoot bugs, improve performance, and measure reliability
• Prevent abuse, fraud, and unauthorized access
• Communicate with you about product updates, security notices, and support
• Comply with legal obligations and enforce our terms

3. AI features and message processing

ThreadJet's AI tools work only if we can process relevant message content.

What gets sent for AI processing

When you click an AI feature (e.g., "Summarize", "Draft Reply", "Auto-categorize"), ThreadJet sends:

• The minimum required message text and minimal metadata needed to complete that request
• We do not send your full inbox by default "just because." Processing is feature-driven.

Model training

• We do not use your private LinkedIn messages to train public models.
• If we ever offer an optional opt-in to improve models using anonymized samples, it will be clearly presented and off by default unless you choose otherwise.

Human review

We do not routinely read your messages. We may access limited data only when necessary to:

• provide support you request,
• investigate abuse/security incidents,
• comply with law.

Where feasible, we use restricted access controls and logging for any administrative access.

No "significant decisions"

We do not use AI to make automated decisions that produce legal or similarly significant effects about you.

4. Legal bases for processing (EEA/UK/Switzerland)

If you are in the EEA/UK/Switzerland, we process personal data under these bases:

• Contract: to provide the Services you request
• Legitimate interests: to secure, maintain, and improve ThreadJet (without overriding your rights)
• Consent: where required (e.g., optional analytics or optional model improvement programs)
• Legal obligation: where applicable laws require processing

If you're elsewhere, we rely on bases permitted under your local law (including consent where required).

5. When we share information

We do not sell your personal information.

We may share information only in these situations:

A. Service providers ("subprocessors")

We use vetted vendors for:

• hosting and infrastructure,
• logging/monitoring,
• error tracking,
• AI inference (when applicable),
• billing/payment processing (when applicable).

They can only process data on our instructions, under contracts with confidentiality and security obligations.

B. Legal and safety

We may disclose information if required to comply with law, court orders, or valid legal requests, or to protect rights, safety, and security.

C. Business transfers

If ThreadJet is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to appropriate safeguards.

6. LinkedIn session, cookies, and extension permissions

• ThreadJet works inside your browser and relies on your existing LinkedIn login session.
• We do not collect or store your LinkedIn password.
• The extension may use your logged-in session information to perform actions you request (like loading threads, marking read, organizing items).
• Browser permission prompts may appear. We request the minimum permissions needed for core functionality and explain why they're needed.

7. Data retention

We keep data only as long as needed for the purposes above:

• AI request/response logs: up to 30 days by default (for reliability, abuse prevention, and debugging), unless we must retain longer for security/legal reasons.
• Operational logs/diagnostics: up to 90 days, often stored in aggregated form.
• Account and billing records: while your account is active and as required by tax/accounting laws.
• Backups: may persist for a limited period (typically up to 30–60 days) before being overwritten.

You can request deletion anytime (see Section 15).

8. Security

We use safeguards designed to protect your data, including:

• encryption in transit (TLS),
• encryption at rest where data is stored,
• least-privilege access controls,
• audit logging and monitoring,
• secure development and incident response practices.

No system is perfectly secure. You're responsible for protecting your device, browser profile, and LinkedIn account.

9. Children's privacy

ThreadJet is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided data, email [email protected].

10. Your choices and privacy rights

Product controls

• You can disconnect or remove the extension at any time (this stops new collection via the extension).
• You can avoid using AI features if you don't want message content processed for AI.

Your rights (may vary by location)

Depending on where you live, you may have the right to:

• access, correct, or delete your data,
• request export/portability,
• object to or restrict processing,
• withdraw consent (where processing is based on consent).

We may ask for verification before fulfilling requests.

11. US state privacy disclosures

If you live in certain US states (e.g., California, Virginia, Colorado, Connecticut, Utah, and others), you may have additional rights.

Categories of data we may collect:

• Identifiers (e.g., email)
• Internet/network activity (usage logs)
• Professional/profile information visible in LinkedIn context
• Message content and metadata needed for features you use

We do not:

• sell personal information,
• share personal information for cross-context behavioral advertising.

To exercise rights, contact [email protected].

12. International transfers

We may process data in countries outside where you live (including India, the US, and/or the EU) depending on infrastructure providers. Where required, we use safeguards such as Standard Contractual Clauses and additional technical protections.

13. Do Not Track

Browsers may offer "Do Not Track" signals. There is no uniform standard, so ThreadJet does not currently respond to DNT signals.

14. Changes to this notice

We may update this notice. The "Last updated" date reflects the latest version. If changes are material, we'll post a notice in the product or on our site.

15. Contact us / Data requests

Email: [email protected]
Post: ThreadJet, Bangalore 560102, India

To request access, export, or deletion of your data, email [email protected] with the subject line:

"Privacy Request – ThreadJet"