Privacy policy.

Only what you give it, and what it needs to run:

• Your account — your name, email address and profile picture, and a username, bio and links if you add them.
• Your work — projects, tasks, documents, comments, messages and the files you attach.
• Activity inside your projects — who changed a task and when (a project's activity log), and when a project was last opened.
• Payments — the amount, date, term and status of each one. Never your card or bank details.
• Messages to Jesse — what you send from the contact page, with the name and email you give.

To run threadline for you, and for nothing else:

• to show your work to the people you share it with, and keep it in sync as they change it;
• to send the in-app notifications you have chosen in Settings;
• to take payments for Pro and keep a record of them;
• to keep the service safe — limiting how fast requests can be made, and stopping abuse;
• to answer you when you write.

threadline doesn't sell your information and doesn't show ads. It runs on a few services that handle data for it, only to run it:

• Clerk — signing in;
• Neon — the database;
• Vercel — hosting, and the files you attach;
• Pusher — live updates between open windows;
• Upstash — rate limiting;
• PayMongo and Polar — payments.

Inside threadline, what you put in a project is visible to that project's members — and to anyone with its link, if the project's Head has turned the link on.

Every connection to threadline is encrypted, and the services above encrypt what they store. Every read and write checks that you are allowed to make it, and your role in a project decides what you can change there.

Your data is kept for as long as your account exists. A deleted project waits in Trash for 15 days and a deleted task can be restored for 3 days; after that they are removed for good.

Deleting your account removes your sign-in and your data straight away. Projects you led pass to whoever has been on them longest, so your team keeps its work.

Depending on where you live, you may have the right to see, correct, move or delete your data, or to object to how it is used. Most of this you can do yourself in Settings — edit your profile, choose your notifications, delete your account. For anything else, write from the contact page.

threadline uses only the cookies it needs: one that keeps you signed in, and a few that remember your preferences. There are no advertising or tracking cookies, and no third-party ones.

threadline is not meant for children under 13, and does not knowingly keep information about them. If it turns out it has, that information is deleted.

Questions about your data go straight to Jesse: write from the contact page, and your message lands in his inbox inside threadline.