ThreadLeapThreadLeap

Legal

Privacy Policy

Effective Date: April 6, 2026

Signature Tech Studio, Inc. ("ThreadLeap," "we," "us," or "our") provides a service that lets users create shareable web pages from email conversations. This Privacy Policy explains how we collect, use, disclose, and retain information when you use ThreadLeap.

If you use Google™ services with ThreadLeap, our use of information received from Google™ APIs is subject to the Google™ API Services User Data Policy, including the Limited Use requirements.

1. Scope

This Privacy Policy applies to:

  • the ThreadLeap website and dashboard
  • the ThreadLeap Gmail™ add-on and related Google™ integrations
  • public share links created through ThreadLeap
  • support and account communications related to ThreadLeap

This Privacy Policy does not apply to third-party services that you access through ThreadLeap or that operate independently from us, including Google™ and Stripe.

2. Information We Collect

A. Information you provide directly

We may collect information you provide when you:

  • create or access a ThreadLeap account
  • sign in with Google™
  • configure share settings
  • create or manage shared links
  • contact support
  • subscribe to a paid plan, if and when paid plans become available

This may include:

  • your name
  • your email address
  • your account profile image
  • your account preferences
  • billing and subscription details, if applicable
  • communications you send to us

B. Information we receive from Google™

If you use Google™ Sign-In or the ThreadLeap Gmail™ add-on, we may receive information from Google™, including:

  • your Google™ account identifier
  • your email address
  • your profile information
  • Gmail™ thread and message content that you choose to share
  • message metadata such as sender, recipients, timestamps, subject lines, and attachment details
  • attachments and inline images for messages you choose to share

We only access Gmail™ data needed to provide the functionality you request, such as generating a share link for a thread you choose to share.

C. Information generated when share links are viewed

When a public or password-protected share link is viewed, we may collect:

  • the time of the view
  • IP address
  • referrer information
  • browser or device user agent information

We use this information to provide basic analytics, secure the service, and investigate abuse.

D. Billing information

If we offer paid subscriptions, payment card information will be processed by Stripe and not stored by ThreadLeap except for limited billing metadata, such as subscription status, plan, billing period, and transaction-related identifiers.

E. Cookies and similar technologies

We use cookies and similar technologies that are reasonably necessary to operate the service, including:

  • session management
  • authentication
  • security
  • remembering account state

We do not currently use third-party advertising cookies or client-side behavioral analytics tools.

3. Google™ User Data

ThreadLeap accesses Google™ user data only when you sign in with Google™, install or use the ThreadLeap Gmail™ add-on, or ask ThreadLeap to create or manage a shared thread from Gmail™.

We use Google™ user data to:

  • authenticate your account
  • identify the active Google™ account using the Gmail™ add-on
  • read the Gmail™ thread, messages, metadata, attachments, and inline images that you choose to share
  • create, store, render, secure, and manage shared thread pages
  • apply your selected sharing settings, including password protection, expiration, and deletion behavior
  • provide support, investigate abuse, maintain security, and comply with legal obligations

We store selected Gmail™ content, attachments, inline images, and related message metadata so that ThreadLeap can host the share links you create. Stored message content and attachments are encrypted at rest.

We do not sell Google™ user data. We do not use Google™ user data for advertising. We do not use Google™ user data to train generalized artificial intelligence or machine learning models.

We share Google™ user data only:

  • with service providers that help us operate ThreadLeap, such as hosting, storage, infrastructure, support, and security providers
  • with people who access share links that you create, subject to the access settings you choose
  • when required to comply with law, enforce our Terms of Service, investigate abuse, or protect ThreadLeap, our users, or others

Human access to Google™ user data is limited to circumstances where access is reasonably necessary for support, security, abuse investigation, legal compliance, or service operation.

4. How We Use Information

We use information to:

  • authenticate users and operate accounts
  • provide the Gmail™ add-on and sharing workflow
  • create, host, and manage shared thread pages
  • render shared messages, inline images, and attachments
  • honor password protection, expiration dates, and deletion settings
  • provide analytics and usage insights for the owner of a shared thread
  • process subscriptions and billing, if applicable
  • maintain security, detect abuse, and prevent fraud
  • comply with legal obligations
  • communicate with you about support, service updates, billing, and account matters

We do not sell personal information.

5. How Share Links Work

ThreadLeap is designed to publish email threads as shareable web pages. If you create a share link:

  • the messages, attachments, and related content you selected may become accessible through that link
  • anyone who has the link may be able to access the content unless you apply password protection or expiration settings
  • you are responsible for choosing appropriate sharing settings and for only sharing content you are authorized to disclose

Because this is a sharing product, information included in a shared thread is intended by the user to be disclosed to recipients of the link.

6. How We Disclose Information

We may disclose information:

  • to service providers that help us operate ThreadLeap, such as hosting, storage, authentication, and payment processors
  • to Google™ when necessary to support account sign-in or the Gmail™ add-on workflow
  • to Stripe, if applicable, for subscription and payment processing
  • to comply with law, regulation, legal process, or lawful government requests
  • to enforce our Terms of Service, investigate abuse, or protect ThreadLeap, our users, or others
  • in connection with a merger, acquisition, financing, reorganization, or sale of assets

Our current infrastructure may include providers such as:

  • Laravel Cloud
  • Cloudflare R2
  • Google™
  • Stripe, if and when billing is enabled

7. Data Retention

We retain data for as long as needed to operate the service and fulfill the purposes described in this Privacy Policy.

In general:

  • shared threads and attachments are retained until deleted by the user, automatically deleted under the user’s settings, or otherwise removed under our retention practices
  • expired shares may remain in our systems until they are processed for deletion
  • when a share or account is deleted, we generally aim to permanently purge associated content from our active systems within 90 days
  • we may retain limited information for longer where reasonably necessary for legal compliance, security, fraud prevention, dispute resolution, backup integrity, or enforcement of our agreements

The additional retention window after deletion exists to allow for operational integrity, recovery, and orderly purge processing.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information.

These safeguards may include:

  • encryption in transit
  • encryption at rest for stored message content and attachments
  • access controls
  • password protection for selected shares
  • operational logging and abuse monitoring

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or request information about your personal data.

You may currently be able to:

  • delete individual shares
  • configure expiration and auto-delete behavior
  • contact us to request account-related assistance

If you want to request deletion or exercise privacy-related rights, contact us at support@threadleap.com.

10. Children

ThreadLeap is not directed to children under 13.

You must be at least 13 years old to use ThreadLeap. If you are under the age of majority where you live, you may use ThreadLeap only with the permission and supervision of a parent or legal guardian who agrees to this Privacy Policy and our Terms of Service.

11. International Users

ThreadLeap is operated from the United States. If you access the service from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States and other jurisdictions where our service providers operate.

12. Third-Party Services

ThreadLeap may contain links to third-party websites or services, and shared email content may include third-party content, links, or hosted assets. We are not responsible for the privacy practices of third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, including material changes to how ThreadLeap accesses, uses, stores, or shares Google™ user data, we will update the effective date and take other reasonable steps to notify users, such as notice in the app, email notice, or other appropriate communication.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

support@threadleap.com