Privacy Policy

Bluethread LLC ("Bluethread," "we," "us," or "our") operates bluethread.io and related products, including the Bluethread Workspace, Operator Hub, Bluethread Collective, and associated advisory services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

1. Who We Are

Bluethread LLC is a California limited liability company. For privacy questions, contact us at rob@bluethread.io.

2. Information We Collect

Account information. When you create an account, sign in via Google, or purchase a subscription, we collect your name, email address, company name, role, and authentication identifiers.

Payment information. Subscription payments are processed by Stripe. We do not store full credit card numbers or bank details on our systems. We retain a record of your subscription status, billing history, and the last four digits of the payment method for accounting purposes.

Usage data. We collect information about how you interact with the Services, including pages visited, features used, actions taken, device type, browser, IP address, and approximate location derived from IP.

Communications. When you contact us or participate in community channels (including the Bluethread Collective), we retain the content of your messages and submissions.

Cookies and similar technologies. We use cookies, local storage, and similar technologies to authenticate sessions, remember preferences, and measure how the Services are used. You can control cookies through your browser settings; disabling them may limit functionality.

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Process transactions and manage subscriptions
• Communicate with you about the Services, including updates, security alerts, and support
• Send marketing communications you can opt out of at any time
• Measure usage, troubleshoot issues, and develop new features
• Enforce our Terms of Service and protect the Services from abuse
• Comply with legal obligations

4. Who We Share Information With

We do not sell personal information. We share information with:

Service providers (data processors) that help us operate the Services, including:

• Supabase (authentication, database hosting)
• Stripe (payment processing)
• HubSpot (customer relationship management, email, and analytics)
• Google (authentication via Google Sign-In, workspace tools)
• Vercel and Lovable (application hosting and infrastructure)
• Circle (community platform for the Bluethread Collective)
• Email and analytics providers used for operational and marketing communications

These providers process information on our behalf under contracts that require appropriate security and confidentiality.

Legal and safety. We may disclose information when required by law, subpoena, court order, or to protect the rights, property, or safety of Bluethread, our users, or others.

Business transfers. If Bluethread is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Your Choices and Rights

Access, correction, and deletion. You can update or delete most of your account information directly in your account settings. To request a copy of the information we hold about you or ask us to delete it, email rob@bluethread.io.

Marketing opt-out. You can unsubscribe from marketing emails using the link in any marketing message. Transactional messages (billing, security, support) will continue.

California residents. If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of certain sharing. You may also designate an authorized agent. To exercise these rights, email rob@bluethread.io. We will not discriminate against you for exercising them.

European Economic Area, United Kingdom, and similar jurisdictions. If you are in a jurisdiction covered by the GDPR or similar law, you have rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local supervisory authority. To exercise these rights, email rob@bluethread.io.

6. Data Retention

We retain personal information for as long as your account is active, as needed to provide the Services, or as required for legal, tax, accounting, and dispute-resolution purposes. When we no longer need information, we delete or anonymize it.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect information, including encrypted connections (HTTPS), authentication, access controls, and vendor due diligence. No system is perfectly secure; we cannot guarantee absolute security.

8. International Transfers

Bluethread is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These locations may have different laws than your jurisdiction.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact rob@bluethread.io and we will delete it.

10. Third-Party Links

The Services may contain links to third-party sites or integrate with third-party services. Their privacy practices are governed by their own policies, not this one.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you by email or through the Services. The "Last Updated" date above reflects the most recent revision.

12. Contact

For questions about this policy or our privacy practices, email rob@bluethread.io or write to: