Most apps built for volunteers treat the people using them as inventory. We built Threadspore to do the opposite. This policy explains what we collect, why, and the lines we will not cross. It is written to be read, not to hide behind.
The short version, and the part we will never quietly change:
- We do not sell or rent your information, or your members' information, to anyone.
- We do not show ads, and we do not share your data with advertisers.
- We do not mine your messages or activity to build profiles or train unrelated products.
- We collect only what Threadspore needs to work for you.
Who we are
Threadspore is operated by Vesper Technologies, LLC, based in Oregon, United States. In this policy, "we," "us," and "Threadspore" mean Vesper Technologies, LLC. "You" means anyone who uses Threadspore, whether you run an organization on it or you were invited to join one.
How Threadspore is organized
Threadspore is built around organizations. An organization is a volunteer group that runs its own portal, sets up teams, and invites people in. If you were invited to a portal, the organization that invited you decides who belongs, what teams exist, and who can see what. They control their space; we provide the tool it runs on.
This matters for your privacy because much of what happens inside a portal is visible to the organization's admins and to the teammates you share it with. We handle that information on the organization's behalf.
What we collect
Information you give us
- Your name and email address, so we can sign you in and so your teammates know who you are. Threadspore signs you in with a one-time code or link sent to your email, so we do not ask you to create or store a password.
- If you choose to add them: a profile picture, a color, and a phone number. The phone number is shown only to teammates inside your organization, so they can call or text you about the work, and you can remove it at any time.
- Organization details, if you set up a portal: your group's name, logo, colors, team names, and similar settings.
- The things you post inside Threadspore: messages, threads, to-dos, poll responses, events, photos, and any files you choose to upload.
- Anything you send us directly, such as a note through our contact form. A note sent from inside the app also carries your app version, phone type, text size setting, and the last few requests that failed, so we can find the problem faster; the app says so on the form, and none of it is your content or contacts.
Information we collect automatically
- Basic technical records needed to run and secure the service, such as your session and limited server logs (for example, the time of a request and general error information).
- If you turn on push notifications in the app, a device token that lets us send them. It identifies the app on your phone, not you; it goes unused while your notifications are set to email or off, and it is removed when you sign out.
- We do not use advertising trackers, third-party analytics that follow you around the web, or fingerprinting.
Why we use it
We use the information above only to run Threadspore for you: to sign you in, show your portal and teams, deliver messages and notifications, keep the service working and secure, and respond when you contact us. That is the whole list. We do not repurpose your information for advertising, resale, or unrelated products.
What we never do
We do not sell, rent, or trade your personal information or your organization's data. We do not share it with advertisers or data brokers. We do not scan your content to build advertising profiles, and we do not use your private messages or files to train unrelated machine-learning systems. If that ever needed to change, we would tell you clearly and ask first, not bury it in an update.
Who can see your information
Inside a portal, your information is visible to the people you would expect: your organization's admins and the teammates in the teams you share. Beyond that, we share information only in these limited cases:
- With service providers who help us run Threadspore, listed below, and only to the extent they need it to do their job for us.
- If the law requires it, such as a valid legal request. If we can tell you, we will.
- To protect people, for example to address fraud, abuse, or a genuine safety risk.
- If Threadspore is ever transferred to a new owner, in which case this policy travels with it and we will notify you.
Our service providers
We keep our list of providers short and choose ones that support this policy. Today they are:
- Netlify, for hosting the service and storing your data securely in the United States.
- Resend, for sending email such as your sign-in codes and notifications.
- Expo, for delivering push notifications to the app, which passes them to Apple (on iPhone) or Google (on Android) to reach your phone. A notification carries only what you would see on the screen.
These providers handle data on our instructions and are not permitted to use it for their own purposes.
Cookies
Threadspore uses only the essential cookies needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies, so there is no consent banner harvesting your choices.
How long we keep it
We keep your information for as long as your account and your organization are active. If you close your account, or an organization closes its portal, we delete or anonymize the associated personal information, except where we are required to keep certain records longer.
You can delete your own account without asking us. In the app it is under Settings; on the web it is at threadspore.com/delete-account. Deletion is scheduled 30 days out, and you can cancel it any time before then. On or shortly after that date we remove your account, email address, phone number, profile, and memberships. Messages you posted inside your teams stay, so the group's record of what was decided is not left with holes, with your name on them marked as a deleted account; you can delete any of your own messages yourself before then.
Your choices
You can review and update your name, picture, phone number, notification choices, and email from within Threadspore, and delete your account as described above. You can also ask us to access, correct, export, or delete your personal information, and we will honor those requests to the extent the law requires. If your information lives inside an organization's portal, we may direct part of your request to that organization, since they control their space.
To make any of these requests, reach us through our contact form.
Security
We use reasonable measures to protect your information, including encrypted connections and passwordless sign-in, which means there is no password to be stolen or reused. No system is perfectly secure, but we take this seriously and design for it.
Younger volunteers
Threadspore is designed for volunteer organizations and is not directed to children under 13. If an organization chooses to invite minors as part of its work, that organization is responsible for obtaining any consent its own rules and local laws require. If you believe a child has provided us information without appropriate consent, contact us and we will address it.
Where your data lives
Threadspore is operated from the United States, and your information is stored and processed there. If you use Threadspore from another country, you understand that your information will be handled in the United States.
Changes to this policy
If we update this policy, we will change the effective date above and, for meaningful changes, tell you within the app or by email. We will not use an update to quietly weaken the promises at the top of this page.
Contact us
Questions about your privacy, or about this policy, are always welcome. Reach a real person through our contact form.