Privacy policy

ThreadsMark is operated by Avisa Technologies (“we”, “us”). This policy explains what ThreadsMark collects when you use it at threadsmark.in, why, who else handles it, and what you can do about it. Questions or requests: info@threadsmark.in.

What we collect

• Your account. Your email address, your name, and a password (stored only as a hash by our authentication provider), or your Google account’s name and email if you sign in with Google.
• What you tell us about yourself. Your role, your work, your goals, the audience you want to reach, topics that are off limits, and the writing samples you give us so drafts sound like you.
• Your material and your posts. Notes you capture, ideas, drafts, scheduled and published posts, and the edits you make to them.
• Images you attach to a post. The photos and screenshots you add, and any description you give them. Your browser resizes them before upload, which also removes hidden details a camera records, such as where a photo was taken. Only people in your account can view them, and they are sent to LinkedIn only as part of a post you publish.
• Your LinkedIn connection. Your LinkedIn name, profile picture and member ID, and an access token that lets ThreadsMark publish posts you have approved.
• Connected sources, only if you connect them. From Slack, Notion, GitHub or an RSS feed: the messages, pages, pull requests or releases you choose to share, plus the access token for that service.
• Payments, if you buy a plan. Your plan, its price and period, and Razorpay’s reference numbers for your subscription and payments. Card, UPI and bank details are entered with Razorpay and never reach ThreadsMark.
• Technical data. Records of security-relevant actions on your account (for example sign-in, connecting a service, publishing), and a one-way hash of your IP address used briefly to limit abuse. Our hosting provider also keeps standard request logs.

How we use it

• To run the service: drafting posts in your voice from your own material, letting you review and edit them, and publishing them to LinkedIn when you approve or schedule them.
• To keep your account secure, prevent abuse and fix problems.
• To send you emails you need: confirming your address, resetting your password, and notices about your posts.

We do not sell your data, we do not show you ads, and we do not use your content to train AI models. Nothing is posted to LinkedIn without your approval.

AI processing

To draft and review posts, ThreadsMark sends the relevant parts of your profile and material to OpenAI through its API. Material from a connected source is only sent once you have chosen to use it. Under OpenAI’s API terms, data sent this way is not used to train their models. Every draft is checked for things that look like passwords, keys or other confidential details before it can be published. When you ask for an AI image, the post’s text (or your description of the image) is sent to OpenAI to create it; the image is stored with your post, marked as AI-made, and only goes out if you keep it.

Who processes your data for us

• Supabase: database and sign-in.
• Vercel: hosting.
• Cloudflare: private storage for images you attach to posts.
• OpenAI: generating and reviewing drafts.
• Resend: sending account emails.
• Razorpay: taking payments for paid plans.
• LinkedIn: where your approved posts are published.
• Slack, Notion and GitHub: only if you connect them, and only to read the material you share.

These providers may store and process data outside your country. We share with each only what it needs to do its part.

Google user data

If you sign in with Google, we receive your name, email address and profile picture, and use them only to create and identify your account. ThreadsMark’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not let people read it except with your permission, for security, or where the law requires, and we do not use it to train AI models.

Security

Access tokens for LinkedIn and connected services are encrypted before they are stored. Each account’s data is kept separate at the database level. Traffic is encrypted in transit. No system is perfectly secure; if a breach affects your data, we will tell you.

Keeping and deleting your data

We keep your data while your account exists. In Settings you can download a copy of your data at any time, and you can delete your account. Deleting it permanently removes your profile, material, posts and stored tokens. It does not remove posts already published on LinkedIn; delete those on LinkedIn. You can disconnect any service in ThreadsMark, and you can also revoke ThreadsMark’s access from that service’s own settings.

Your rights

You can ask us to access, correct or delete your personal data, or ask a question about how it is used, by writing to info@threadsmark.in. We will answer within 30 days.

Cookies

ThreadsMark uses only the cookies it needs to keep you signed in and to complete a connection to another service safely. No advertising or tracking cookies. When you pay for a plan, Razorpay’s payment window sets its own cookies, which it needs to process and secure the payment; they are covered by Razorpay’s privacy policy.

Children

ThreadsMark is not meant for anyone under 18, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date at the top, and for significant changes we will tell you by email or in the app before they take effect.