Privacy Policy
Last updated: October 16, 2026
This Privacy Policy explains what information ThreadKeepAI ("ThreadKeep," "we," "us," "our"), published by DistillAI, collects when you use the ThreadKeep web app or the ThreadKeepAI browser extension for ChatGPT, or visit threadkeepai.com, and how we use, store and protect it. ThreadKeep is in open beta.
1. What we collect
| Category | What it is | Where it's stored |
|---|---|---|
| Account | Your email address and sign-in details. Your password is handled by our sign-in provider and is never visible to us. | Supabase (authentication) |
| Your workspaces | Workspace names and goals, the records you keep (facts, decisions, preferences, next steps, questions), their sources and up to 20 earlier versions of each record. | Supabase (database), readable only when you're signed in |
| Unfinished imports | While an import is in progress: the conversation text you pasted or loaded and the suggestions you're checking, so you can come back to it. Finishing or discarding the import removes it. | Supabase (database), with that workspace |
| AI import usage | A count of AI import attempts per account per day, used to apply the daily limit. No conversation text. | Supabase (database) |
| Your sign-in on this device | Your sign-in session, kept in the browser tab, and on-device counts of handoffs copied, shared or downloaded (for the Beta report). | Your browser only |
| Feedback you send | Only when you choose Send feedback or Beta report and send the email: your message and the technical details or counts shown before sending. These contain no workspace names, record text or conversation text. | Our email inbox |
The threadkeepai.com website doesn't use analytics, advertising tags or tracking cookies.
2. AI import
Bringing in a conversation with AI suggestions is optional and happens only after you tick the approval box each time. Then the conversation text you pasted or loaded is sent through ThreadKeep's import service to OpenAI's API to suggest what's worth keeping. Your other records and workspace names aren't sent. We ask OpenAI not to store the request (the API's store setting is off); OpenAI processes it under its own API terms and policies. Nothing is saved to your workspace until you check the suggestions and choose what to keep.
3. ThreadKeepAI browser extension for ChatGPT
The extension is available for Google Chrome and Microsoft Edge. It is optional. It works only on the ChatGPT tab you have open, and only when you click its buttons. It uses its own sign-in to your ThreadKeepAI account.
- Reading: when you click Read loaded messages, it reads the messages already loaded on that ChatGPT page and shows them in the extension. Nothing leaves your browser at this point. Closing the extension discards them.
- Saving: when you click Transfer, it saves only the messages you ticked, the source name (the conversation's title, which you can edit) and the conversation's chatgpt.com address to the workspace you chose, as an unfinished import (see section 1). It makes no AI request. AI suggestions happen later in the web app, only if you approve them (section 2).
- Your workspaces: when you sign in, refresh the list, check a destination, transfer or preview a handoff, it downloads your workspaces from your account (names, records, drafts and unfinished imports) to list them and check the one you chose. They're held only while the extension is open.
- Handoff: when you ask for a handoff, it builds it from the chosen workspace's trusted records only, using the same rules as the web app. After you review the handoff, it places that text in an empty new ChatGPT draft. It never presses Send; you decide whether to send it.
- Stored in your browser: your sign-in session and the link to your last captured import (both cleared when you sign out of the extension, when the browser restarts, or when the extension is updated or turned off), and the ID of the workspace you last chose. Your password is never stored.
Saving transfers the text you selected to ThreadKeepAI's account service (Supabase), the same database the web app uses. Capture makes no AI request. Handoff places text on ChatGPT's page but never presses Send. The extension doesn't collect other tabs, attachments, images or analytics, and no browsing history beyond the conversation address saved with a capture.
4. How we use information
- To provide ThreadKeep: saving your workspaces and keeping them in step across your devices;
- To suggest records from conversations you choose to bring in;
- To apply usage limits and protect the service from abuse;
- To communicate with you about your account, such as confirmation and password reset emails;
- To answer feedback and support requests you send us.
We don't sell your personal information, and we don't use your records or conversations to train any AI models.
5. Third-party services
- Supabase: sign-in, database and the import service, for the web app and the extension;
- OpenAI: suggestions for conversations you approve sending (see section 2);
- HostGator: hosting for the threadkeepai.com website;
- Stripe: payment processing, once paid plans are offered after the beta. ThreadKeep doesn't take payments during the beta.
Each is governed by its own privacy policy.
6. Data retention
We keep your account and workspaces while your account is active. When you delete a record or a whole workspace permanently in ThreadKeep, it's removed from our database straight away, including its history. Routine backups kept by our database provider may hold copies for a limited time before they're overwritten. To have your whole account deleted, email beta@threadkeepai.com; there's no self-service account deletion yet, so this is handled on request.
7. Data security
Everything between your browser and ThreadKeep is encrypted (HTTPS). The database only lets each signed-in account read its own workspaces, and saving or deleting goes through checks that confirm it's your account and your latest version. Our OpenAI key is kept as a server-side secret and is never sent to browsers. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.
8. Your choices
- Download a backup of one workspace, or of all of them, at any time;
- Archive or permanently delete records, and set aside or permanently delete whole workspaces;
- Use ThreadKeep without AI import: add records by hand;
- Ask for a copy of your data, or for your account to be deleted, at beta@threadkeepai.com.
9. Children's privacy
ThreadKeep is not directed at children under 18, and we don't knowingly collect information from them.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, tell you in the app or by email.
11. Contact
Questions about this policy or your data? Reach us at beta@threadkeepai.com.