Privacy Policy
Last updated: 2026-05-16
1. Who we are
ThreadSweep is operated by Pleistocene Technologies LLP ("we", "us"). This Privacy Policy describes what data we collect, why, how we use it, and your rights.
2. Data we collect
- Account data: name, email, password hash, billing address.
- Configuration data: the keywords, subreddits, and ICP description you provide so we can monitor on your behalf.
- Usage data: which leads were sent, opened, or marked relevant, used to improve classification quality for your account.
- Payment data: handled entirely by our third-party Merchant of Record. We never see or store your card details.
- Analytics: aggregate, cookieless analytics via Plausible (page views, referrer, country). No cross-site tracking.
3. What we do NOT collect
- Private Reddit content (DMs, private subreddits).
- Browsing history outside our site.
- Behavioral profiles for advertising. We do not run ads and do not sell data.
4. How we use your data
- To operate the Service — monitor Reddit, classify threads, send your daily email.
- To improve classification quality, including using anonymized signals across accounts to tune intent scoring.
- To handle billing, support, and account communication.
- To comply with legal obligations.
5. Sub-processors
We use the following sub-processors to operate the Service:
- Vercel — hosting
- Cloudflare — DNS, CDN, security
- Supabase — database, auth (added when self-serve onboarding ships)
- Anthropic, Inc. — AI thread intent classification and reply drafting
- Resend — transactional email delivery
- LemonSqueezy — payment processing (Merchant of Record)
- Plausible — privacy-friendly analytics (no cookies, no cross-site tracking)
- Google (Sheets / Apps Script) — intake form data store (Week 1 only)
Each sub-processor is bound by their own privacy and security commitments. We do not share data with third parties beyond what is required to operate the Service.
6. Public Reddit content
We access only publicly visible Reddit content via the official Reddit API or equivalent public interfaces. We do not access content that the original poster has made private or deleted. Reddit content remains the intellectual property of its authors and Reddit, Inc.
7. Data retention
- Account and configuration data: retained while your account is active, deleted within 90 days of cancellation.
- Lead delivery logs: retained 12 months for support and quality improvement, then deleted or aggregated beyond recognition.
- Billing records: retained 7 years to comply with tax law (Indian Income Tax Act).
8. Your rights
You may, at any time:
- Request a copy of the data we hold about you.
- Correct or update your data.
- Request deletion of your account and data (subject to legal retention requirements).
- Withdraw consent and stop using the Service.
To exercise any of these rights, email hello@threadsweep.com. We respond within 7 days.
9. International data transfer
Your data is stored and processed on servers located outside India (primarily United States and European Union, depending on the sub-processor). By using the Service, you consent to such transfer.
10. Security
We use HTTPS, encrypted data at rest, scoped API keys, and least-privilege access controls. No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you within 72 hours.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before taking effect.
12. Contact
Privacy questions or data requests: hello@threadsweep.com
Legal: legal@threadsweep.com
Operating entity: Pleistocene Technologies LLP
This Privacy Policy is provided in good faith as a baseline. It is not a substitute for legal advice.