1. What information do we collect
A. Information you provide
Account and contact details such as name, email address, workspace or company name, and support communications. Feedback, feature requests, and any files you send us. All personal information you provide must be true, complete, and accurate. Please notify us of any changes.
B. Information collected automatically
When you install or use the extension or visit our website, we automatically collect device and usage data (e.g., IP address, browser type and version, operating system, language preferences, referring URLs, pages viewed, timestamps), extension version, error logs, performance metrics, and cookie data as described below.
C. LinkedIn data used to power the extension
To provide an enhanced LinkedIn messaging experience, the extension accesses your LinkedIn session and processes data such as profile information, connections, conversation lists, message threads, message content, and related metadata (participant identifiers, timestamps, status, thread IDs). Important change: To run AI features and automate actions you request, ThreadJet transmits certain message content and minimal metadata from your browser to our servers for processing. We only transmit what is needed to provide the feature you invoke. We do not collect biometric data or intentionally collect sensitive personal information. If you include sensitive data in messages or attachments, it may be processed only to perform the feature you requested.
2. How do we process your information
We process personal information to provide and operate the Services you request (including AI-assisted drafting, classification, templates, scheduling, bulk sending, inbox organization, analytics, and error recovery), authenticate you and maintain your session, troubleshoot and secure performance, communicate with you, and enforce terms, prevent fraud, and comply with legal obligations.
AI processing and automation
When you use AI features, the specific message content and minimal metadata required for that feature are sent to our servers and processed by our models or vetted subprocessors. By default, AI inputs and outputs are retained for a limited time for quality, abuse prevention, and diagnostics. You can request deletion at any time. We do not use your data to train public models. If we offer an opt in for model improvement, it will be clearly presented and disabled by default unless you opt in. We do not perform automated decisions that produce legal or similarly significant effects without human involvement.
3. Legal bases for processing
If you are in the EEA, UK, or Switzerland, we rely on performance of a contract, legitimate interests (that do not override your rights), consent where required (e.g., optional analytics or model improvement), and compliance with legal obligations. In Canada, we rely on consent or implied consent where appropriate and other bases permitted by law.
4. When and with whom we share personal information
We do not sell personal information. We share personal information only with: service providers and subprocessors (cloud hosting, logging, monitoring, AI inference) under written contracts and strict security controls; in business transfers (merger, acquisition, asset sale); and for legal compliance and safety.
5. How we handle your LinkedIn session and cookies
The extension uses your existing LinkedIn authentication cookies (e.g., JSESSIONID and li_at) to make authorized requests to LinkedIn on your behalf. We do not collect or store your LinkedIn password. The extension reads only the cookies necessary to perform the actions you trigger. Chrome may prompt you to grant permissions-we request the minimum needed for functionality and explain what is accessed and why.
6. Data retention
Message content and AI interactions sent to our servers are retained only as long as needed to provide the feature, ensure delivery, maintain logs for reliability and abuse prevention, and comply with law. Our default retention for AI request and response logs is up to 30 days unless a longer period is required for security, abuse investigations, or legal obligations. Operational logs and diagnostics may be retained up to 90 days, and longer in aggregated or anonymized form. Account and billing data are retained while your account is active and as required by tax and accounting rules. You can request deletion at any time.
7. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit, encryption at rest for stored data, access controls, and audit logging. No system can be guaranteed 100% secure. You are responsible for strong device security and keeping your browser and extension updated.
8. Children's privacy
The Services are not directed to children under 18, and we do not knowingly collect data from them. If you believe a child has provided personal information, contact support@threadjet.ai and we will delete it.
9. Your privacy rights and choices
Depending on where you live, you may have rights to access, correct, delete, or port your data; object to or restrict processing; and withdraw consent. Exercise these rights by emailing support@threadjet.ai. We may verify your identity. You can disable or remove the extension at any time through your browser. If we offer an opt-in to allow anonymized samples for model improvement, it will be off by default and presented with a clear toggle.
10. Do Not Track controls
Most browsers include a Do Not Track setting. The Services do not currently respond to DNT signals. You can manage cookies through your browser settings.
11. United States state privacy disclosures
For residents of California, Virginia, Colorado, Connecticut, Utah, and other jurisdictions with privacy laws, you may have additional rights to access, delete, correct, or opt out of targeted advertising and certain profiling. Categories of personal information collected in the last 12 months include identifiers and contact data, online identifiers, internet or network activity, professional information available on your LinkedIn profile, and message content and metadata necessary to provide AI features you request. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information in ways that require a separate opt out. Authorized agents may submit requests to support@threadjet.ai with proof of authorization.
12. International transfers
We may process and store information on servers outside your state or country, including in the United States or the European Union. Where required, we use appropriate safeguards such as Standard Contractual Clauses and implement additional security measures.
13. Changes to this notice
We may update this notice from time to time. The "Last updated" date shows the latest revision. Material changes will be posted in the extension or on our website.
14. Contact us
Email: support@threadjet.ai
Post: ThreadJet, Bangalore 560102, India
15. How to review, update, or delete your data
Email support@threadjet.ai with your request. We will respond according to applicable law. You can also remove the extension at any time, which stops new data collection by the extension.