Privacy Policy

Last updated: October 10, 2026

This policy explains how Threadship, Inc. (“Threadship,” “we,” or “us”), based in San Francisco, California, handles information in the Threadship agent and on threadship.ai. Threadship is a service for businesses. Questions: support@threadship.ai.

1. Information we collect

  • Account information: your name, email address and the account identifiers of the provider you sign in with (such as Microsoft or Google), and your team and role in Threadship.
  • Microsoft 365 data your organization connects: the email (with attachments) received by the agent's Microsoft 365 account, and files in the OneDrive or SharePoint folders an admin chooses. The permissions involved are listed on our Security page.
  • Content you add in Threadship: chat messages, answers to the agent's questions, team memory, shipment details and settings.
  • Website usage: on threadship.ai we count page views with Cloudflare Web Analytics, which doesn't use cookies. The Threadship app uses cookies needed for sign-in. See section 9.
  • Waitlist: if you join the waitlist, your work email and company, collected through Google Forms, so we can contact you about Threadship.

2. What we keep from Microsoft 365

We store the shipment information the agent extracts (for example dates, references and parties), links to the emails and files it came from (message and file IDs, subject, sender and date), and documents the agent files into your own folders. We don't keep a copy of your mailbox or your files: the agent reads them through Microsoft when a task needs them.

3. How we use information

We use information to provide the service your organization asked for: reading and filing shipment mail and documents, keeping shipment records and connected spreadsheets up to date, drafting emails, answering your team, and remembering how your team works. We also use it to secure the service, prevent misuse, troubleshoot and support you.

We don't sell information, use it for advertising, or use your organization's content to train AI models. Our staff look at your content only with your permission, when needed for security or to investigate misuse, or when the law requires it.

4. AI processing

The agent runs on Anthropic's Claude models through Anthropic's API. The content a task needs (for example an email, its attachments, the shipment record and the team memory) is sent to Anthropic to produce the agent's response. Under Anthropic's commercial terms, that content is not used to train their models.

5. Service providers

We share information only with providers that help us run Threadship, under contracts that limit their use of it. They include:

  • Cloud hosting and database (in the United States)
  • An AI model provider (Anthropic)
  • Background job processing
  • Email delivery for notifications to team members
  • Website hosting and analytics (Cloudflare)
  • Waitlist sign-ups (Google Forms)

A current list of these providers is available on request at support@threadship.ai.

We may also disclose information when the law requires it, to protect the rights and safety of our users or Threadship, or as part of a merger or acquisition, in which case this policy continues to apply to it.

6. Retention and deletion

  • The agent's working transcript for each task is encrypted and deleted after 30 days.
  • Shipment records, chat messages and team memory are kept while your organization uses Threadship.
  • When your organization stops using Threadship, an admin can ask us at support@threadship.ai to delete its data. We delete it, except what we must keep by law.

To stop the agent's access to Microsoft 365, see “Revoking access” on our Security page.

7. Security

We use technical and organizational safeguards described on our Security page, including encryption in transit and at rest. No online service can guarantee absolute security.

8. Your choices and rights

Your organization decides who joins its team and what the agent can reach. Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to its use. Email support@threadship.ai. Where we process information on behalf of your organization, we may refer your request to it.

9. Cookies and analytics

threadship.ai doesn't use cookies for analytics or advertising. We count page views with Cloudflare Web Analytics, which doesn't use cookies; it receives the page address, the referring page, your browser type and page load timing. Cloudflare, which serves the site, may set a cookie needed to protect it from automated traffic.

The Threadship app uses cookies needed to sign you in and keep you signed in. You can block cookies in your browser, but sign-in won't work without them.

10. Where data is processed

Threadship stores your data in the United States. Some of our service providers may process it in other countries, where data protection laws may differ from yours.

11. Children

Threadship is for businesses and is not directed at children under 16.

12. Changes and contact

We'll update this policy as Threadship changes, and show the new date at the top. For significant changes we'll also tell admins by email or in the app. Contact: Threadship, Inc., support@threadship.ai.