Privacy Policy
Last updated: November 5, 2026
This Privacy Policy explains what information ThreadKeepAI ("ThreadKeep," "we," "us," "our"), published by DistillAI, collects when you use the ThreadKeep web app, the ThreadKeepAI browser extension for ChatGPT or the ThreadKeepAI connector for Claude, or visit threadkeepai.com, and how we use, store and protect it. ThreadKeep is in open beta.
1. What we collect
| Category | What it is | Where it's stored |
|---|---|---|
| Account | Your email address and sign-in details. Your password is handled by our sign-in provider and is never visible to us. | Supabase (authentication) |
| Your workspaces | Workspace names and goals, the records you keep (facts, decisions, preferences, next steps, questions), their sources and up to 20 earlier versions of each record. | Supabase (database), readable only when you're signed in |
| Unfinished imports | While an import is in progress: the conversation text you pasted or loaded and the suggestions you're checking, so you can come back to it. Finishing or discarding the import removes it. | Supabase (database), with that workspace |
| AI import usage | A count of AI import attempts per account per day, used to apply the daily limit. No conversation text. | Supabase (database) |
| Connected apps | If you connect ThreadKeepAI to Claude: which app you allowed, when, and the sign-in tokens issued to it (see section 4). | Supabase (authentication) |
| Your sign-in on this device | Your sign-in session, kept in the browser tab, and on-device counts of handoffs copied, shared or downloaded (for the Beta report). | Your browser only |
| Feedback you send | Only when you choose Send feedback or Beta report and send the email: your message and the technical details or counts shown before sending. These contain no workspace names, record text or conversation text. | Our email inbox |
The threadkeepai.com website doesn't use advertising tags or tracking cookies. Cloudflare, which delivers the website, counts page visits with Cloudflare Web Analytics, which uses no cookies and doesn't identify you.
2. AI import
Bringing in a conversation with AI suggestions is optional and happens only after you tick the approval box each time. Then the conversation text you pasted or loaded is sent through ThreadKeep's import service to OpenAI's API to suggest what's worth keeping. Your other records and workspace names aren't sent. We ask OpenAI not to store the request (the API's store setting is off); OpenAI processes it under its own API terms and policies. Nothing is saved to your workspace until you check the suggestions and choose what to keep.
3. ThreadKeepAI browser extension for ChatGPT
The extension is available for Google Chrome, Microsoft Edge and Firefox (desktop). In Firefox, the data it handles is also listed in Firefox's own consent prompt when you install it. It is optional. It works only on the ChatGPT tab you have open, and only when you click its buttons. It uses its own sign-in to your ThreadKeepAI account.
- Reading: when you click Read loaded messages, it reads the messages already loaded on that ChatGPT page and shows them in the extension. Nothing leaves your browser at this point. Closing the extension discards them.
- Saving: when you click Transfer, it saves only the messages you ticked, the source name (the conversation's title, which you can edit) and the conversation's chatgpt.com address to the workspace you chose, as an unfinished import (see section 1). It makes no AI request. AI suggestions happen later in the web app, only if you approve them (section 2).
- Your workspaces: when you sign in, refresh the list, check a destination, transfer or preview a handoff, it downloads your workspaces from your account (names, records, drafts and unfinished imports) to list them and check the one you chose. They're held only while the extension is open.
- Handoff: when you ask for a handoff, it builds it from the chosen workspace's trusted records only, using the same rules as the web app. After you review the handoff, it places that text in an empty new ChatGPT draft. It never presses Send; you decide whether to send it.
- Stored in your browser: your sign-in session and the link to your last captured import (both cleared when you sign out of the extension, when the browser restarts, or when the extension is updated or turned off), and the ID of the workspace you last chose. Your password is never stored.
Saving transfers the text you selected to ThreadKeepAI's account service (Supabase), the same database the web app uses. Capture makes no AI request. Handoff places text on ChatGPT's page but never presses Send. The extension doesn't collect other tabs, attachments, images or analytics, and no browsing history beyond the conversation address saved with a capture.
4. ThreadKeepAI connector for Claude
You can connect ThreadKeepAI to Claude (claude.ai, the Claude apps, Claude Code and Cowork) so Claude can read your saved context when you ask it to. The connector is optional and read-only.
- Connecting: you add the connector in Claude, sign in to ThreadKeepAI on our page and choose Allow. Claude then receives a sign-in token for your account; it never sees your password.
- What Claude can read: your workspace names and goals, and your records (facts, decisions, preferences, next actions and questions, with their sources and rationale). Claude reads them only when it uses one of the connector's tools to answer you: listing your workspaces, getting a workspace's handoff (trusted records only, the same text as Copy handoff), or searching your records. Unfinished imports and earlier versions of records aren't shared.
- What it can't do: change, add or delete anything in ThreadKeepAI. It makes no AI request on our side.
- Where it goes: what Claude reads becomes part of your Claude conversation, where Anthropic handles it under its own terms and privacy policy. We don't send your data to Anthropic in any other way, and we never see your Claude conversations.
- Our side: the connector checks your sign-in on every request and reads with your own account's permissions, so it can only see your workspaces. It keeps no copy of what it returns. Our hosting provider (Supabase) keeps routine request logs (time, address and result) for a short period.
- Disconnecting: remove or disconnect ThreadKeepAI in Claude's connector settings at any time. To also cancel the connection on our side, email beta@threadkeepai.com and we'll revoke it.
5. How we use information
- To provide ThreadKeep: saving your workspaces and keeping them in step across your devices;
- To suggest records from conversations you choose to bring in;
- To apply usage limits and protect the service from abuse;
- To communicate with you about your account, such as confirmation and password reset emails;
- To answer feedback and support requests you send us.
We don't sell your personal information, and we don't use your records or conversations to train any AI models.
6. Third-party services
- Supabase: sign-in, database, the import service and the Claude connector, for the web app, the extension and Claude;
- OpenAI: suggestions for conversations you approve sending (see section 2);
- Anthropic: Claude, only if you connect ThreadKeepAI to it (see section 4);
- Namecheap: hosting for the threadkeepai.com website;
- Cloudflare: delivers and protects the website, and counts visits without cookies;
- Stripe: payment processing, once paid plans are offered after the beta. ThreadKeep doesn't take payments during the beta.
Each is governed by its own privacy policy.
7. Data retention
We keep your account and workspaces while your account is active. When you delete a record or a whole workspace permanently in ThreadKeep, it's removed from our database straight away, including its history. Routine backups kept by our database provider may hold copies for a limited time before they're overwritten. To have your whole account deleted, email beta@threadkeepai.com; there's no self-service account deletion yet, so this is handled on request.
8. Data security
Everything between your browser and ThreadKeep is encrypted (HTTPS). The database only lets each signed-in account read its own workspaces, and saving or deleting goes through checks that confirm it's your account and your latest version. Our OpenAI key is kept as a server-side secret and is never sent to browsers. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.
9. Your choices
- Download a backup of one workspace, or of all of them, at any time;
- Archive or permanently delete records, and set aside or permanently delete whole workspaces;
- Use ThreadKeep without AI import: add records by hand;
- Connect ThreadKeepAI to Claude, or disconnect it, whenever you like (section 4);
- Ask for a copy of your data, or for your account to be deleted, at beta@threadkeepai.com.
10. Children's privacy
ThreadKeep is not directed at children under 18, and we don't knowingly collect information from them.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, tell you in the app or by email.
12. Contact
Questions about this policy or your data? Reach us at beta@threadkeepai.com.