Legal

Privacy Policy

Effective September 16, 2026

Threadmap provides tools for retrieving existing YouTube captions and, when a signed-in user requests it, creating transcripts from public video audio. This policy explains what information we collect, why we use it, and the choices available to you.

Information we collect

Account and Google sign-in data

If you sign in with Google, Threadmap accesses only the basic account information needed to authenticate you: your Google account identifier, name, email address, and profile image. We do not receive your Google password and do not request access to Google Drive, Gmail, contacts, calendars, or private YouTube account data.

If you sign in by email, we process your email address and authentication session information. When you connect an agent through OAuth, we store the registered client details, granted permissions, and hashed authorization credentials needed to maintain or revoke that connection. We do not store OAuth access or refresh tokens in readable form. If you join a waitlist, we store the email address you submit. If you contact customer support or send product feedback, we store your name or role if provided, email address, selected topic, message, publication permission, and the status of your request. If you submit a public review, we store the review text, rating, and display name for moderation and publication; reviews are not published until approved.

Service and API data

We process YouTube URLs or video IDs you submit, generated or retrieved transcripts, selected transcript mode, API usage, video duration, request status, and technical diagnostics. To understand and improve the extraction experience, we also record public video metadata such as title and channel, transcript language and duration, success or error status, referring hostname and campaign parameters, and an anonymous first-party session identifier. If you choose to answer the optional use-case question, we store the category you select. This product-analytics record does not contain the transcript text or your IP address.

To categorize public videos for aggregate product analytics, Threadmap may send the public video title, channel name, and short samples from the beginning, middle, and end of the transcript to OpenAI. The resulting format and topic labels are stored with the extraction analytics record. When you request an AI transformation or an answer about a video, the transcript and any question you enter are also sent to OpenAI to generate that result. API keys are stored as one-way cryptographic hashes. General transcript results may be cached for up to 30 days to improve speed and reduce repeated processing. When you are signed in, successful transcripts and generated AI results are also saved privately to your account library so you can search and reopen them.

AI results remain private unless you explicitly use Share result. A shared page contains the generated result, its action label, the source video, and—when applicable—the question you chose to share. It does not publish the full source transcript. Anyone with the shared link can view that page.

Billing data

Stripe processes payment card details for credit-pack purchases. Threadmap receives billing identifiers, purchased package information, and payment status, but not complete card numbers.

Analytics, advertising, and technical data

With your consent, Google Analytics and Google Ads may process cookie identifiers, browser and device information, pages viewed, and interactions with Threadmap. Hosting and security systems may also process IP addresses, timestamps, user-agent information, and request logs for security, reliability, and abuse prevention.

How we use information

We use information to authenticate users, provide transcripts and API access, calculate and debit Threadmap Credits, process purchases, respond to support and privacy requests, prevent abuse, diagnose failures, improve Threadmap, and measure marketing performance where consent has been provided.

How we use Google user data

Google user data is used only to create and authenticate your Threadmap account, display basic account information, secure your session, and communicate about the service. We do not sell Google user data, use it for targeted advertising, or use it to train generalized artificial intelligence or machine-learning models.

Service providers and data sharing

We share information only as needed to operate Threadmap with service providers such as Supabase for authentication and databases, Vercel and our server hosting providers for application delivery, Stripe for billing, OpenAI for requested audio transcription and transcript transformations, proxy infrastructure used to retrieve public video resources, and Google Analytics or Google Ads after consent. These providers process information under their own terms and privacy commitments.

We may also disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information.

Data retention and deletion

We retain account information while your account is active and for a reasonable period afterward where necessary for security, billing, dispute resolution, or legal obligations. Saved library transcripts are retained with your account until they or the associated account are deleted. API usage and billing records may be retained for legitimate business and legal purposes. Waitlist information is retained until launch communications are complete or you request deletion.

You may request access to or deletion of your account and associated personal information through our Customer Support form by selecting “Privacy or data request.” We will delete or anonymize eligible data unless retention is required by law or needed to protect the service.

Security

We use HTTPS encryption in transit, restricted server credentials, hashed API keys, access controls, and service isolation. No online service can guarantee absolute security, but we review and improve these safeguards as Threadmap develops.

Your choices

You can decline optional analytics and advertising cookies or change your choice through Cookie settings. You can stop using Google sign-in and revoke Threadmap access from your Google Account permissions. Depending on your location, you may also have rights to access, correct, delete, restrict, or export personal information.

Children

Threadmap is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as Threadmap changes. We will update the effective date and provide additional notice when a change materially affects how personal information or Google user data is used.

Contact

For privacy questions or data requests, use our Customer Support page.