Threadwise Privacy Policy

1️⃣ What This Is

Plain-language privacy information for Threadwise Studio (AI product photo and creative tools) and any related products such as occasional courses, workshops, and digital downloads.

2️⃣ Data I Collect

• Identity & contact: name, email, and (where needed for billing) country and basic billing details.
• Account & access: login email, hashed password, access status, your Studio credit balance, jobs you run (including fast pass usage), and support messages.
• Purchases: what you bought (e.g. Studio credits, packs, occasional courses), price, currency, timestamps, internal invoice IDs and billing status. I do not charge VAT; your local VAT handling is your responsibility.
• Payments: processed by Stripe and/or PayPal. I do not see or store full card numbers.
• Usage & technical: pages viewed, clicks, device and browser type, approximate location (country/region), referral source, error logs and performance data.
• AI content: product photos and other images you upload, prompts you type, and the images generated for you. If you use the report feature, I also store the reporting reason, the internal review decision, and any short note.
• Marketing & analytics: Meta and Google Analytics events, email performance and similar, only where you have given consent where required.

3️⃣ Where Data Comes From

• Directly from you (sign-ups, purchases, uploads, prompts, support requests).
• Automatically via cookies, pixels and similar technology (consent-based where required).
• From service providers (payment confirmations, analytics events, error logs, email delivery data).

4️⃣ Legal Bases (GDPR)

• Contract: to create and manage your account, provide Studio features, deliver digital products, and handle support.
• Legal obligation: tax/accounting rules, fraud prevention, and record keeping.
• Legitimate interests: service security, abuse prevention, improving Studio quality, and handling misuse of reporting feature or refunds.
• Consent: analytics/ads, non-essential emails, non-essential cookies, and (where applicable) the use of content by AI providers for training or improving their models.

5️⃣ How I Use Your Data

• To run Threadwise Studio: generate, display and temporarily store your images and job history.
• To manage credits and access: credit balance, fast pass usage, top-ups, and access control.
• To provide support: respond to your questions, help with access issues, and handle refund/reporting requests.
• To review reported images: manually check reported jobs, decide on potential credit refunds, and record the outcome.
• To protect the service: prevent abuse, handle misuse of the reporting feature system, and keep systems secure.
• To measure and improve: aggregated stats on usage, performance and errors (with consent where required for analytics).

6️⃣ Processors & Third Parties

• Kajabi - account management for some products, content delivery, email sending.
• Payment processors (e.g. Stripe, PayPal) - to process your payments securely.
• Cloud hosting & database providers (EU/EEA or with GDPR safeguards) - to run Threadwise Studio and store encrypted data.
• AI infrastructure providers - to process your uploaded images and prompts and generate outputs.
• Meta - ads and measurement, based on consent and your browser settings.
• Google Analytics / similar tools - analytics, only where consent is given.
• Email and support tools - to send transactional and (if you opt in) marketing emails, and to respond to support.

I do not sell your personal data. I also do not share it with others for their own marketing. Data may be disclosed where required by law or to protect legal rights.

7️⃣ AI Tools (Threadwise Studio)

• Inputs & consent: you are responsible for having all necessary rights and permissions to the content you upload (for example: product photos, patterns, logos, backgrounds). If your uploads contain identifiable people, you are responsible for having their consent where required by law.
• Prohibited and illegal content: you must not upload content that is illegal, abusive or otherwise prohibited in your jurisdiction (for example: unlawful hate content, non-consensual images, or content that infringes third-party rights). Threadwise provides tools as a middle man and does not review all content before processing. You remain fully responsible for any legal consequences of the content you choose to upload and generate.
• Outputs: Studio generates images for you based on your inputs and prompts. Your rights and allowed usage of outputs (especially after refunds) are governed by the Terms & Conditions.
• AI APIs & external providers: to generate results, your uploads, prompts and related technical data are sent to external AI model providers via their APIs. These providers process your content to generate outputs for you and may also process limited metadata (such as timestamps, technical logs and error information).
• Training & model improvement:
  • Some AI providers may offer the option to use submitted content to improve or train their models. Where this goes beyond what is strictly necessary to provide the service, it is based on your consent and/or the provider’s own terms.
  • If and when it is possible to refuse such optional training, we do it automatically. If it is not possible to refuse it, we consider your image upload as a consent.
• Reporting & manual review: if you report a generation, a human may review the image, your reporting reason and basic job data. A short decision and reason may be stored in your account (for example, “credit refunded” or “not eligible”).
• Storage & deletion of images:
  • Unreported images and their underlying files are normally stored for up to 24 hours after generation.
  • Reported images and their underlying files may be stored for up to 14 days so I can manually review the reported image and, if applicable, grant a credit refund.
  • After these periods, images are automatically deleted and cannot be restored.
• AI disclosure: depending on the platform or jurisdiction where you use Studio images, you may be required to disclose that they are AI-generated or AI-edited. You are responsible for following those rules.

8️⃣ International Transfers

When your data is processed outside the EU/EEA (for example by cloud or AI providers), I use appropriate GDPR safeguards such as Standard Contractual Clauses or equivalent mechanisms where required.

9️⃣ Retention

• Account and Studio data: kept while your account is active and for a reasonable period afterwards, or as required by law.
• Billing & payment records: kept as required by tax and accounting law (typically 5-10 years, depending on jurisdiction).
• AI inputs/outputs: as described above - up to 24 hours for unreported images and up to 14 days for reported images.
• Reporting, decisions & logs: stored for as long as reasonably necessary to operate the service, prevent abuse and handle any disputes.

🔟 Your Rights

• Access your personal data and receive a copy.
• Correct inaccurate data.
• Request deletion of your data, where legally allowed.
• Object to or restrict certain processing.
• Data portability for information you provided, where applicable.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To use these rights, contact: [email protected]

1️⃣1️⃣ Cookies & Similar Tech

• Strictly necessary: login/session cookies, security and fraud prevention cookies, and cookies needed to run your account and Studio.
• Analytics & ads (consent-based): tools like Google Analytics and Meta pixels, where allowed and only if you give consent.
• Platform cookies: Kajabi and other platforms I use may set their own cookies to keep you logged in and deliver content.

Where required, you will see a cookie banner allowing you to accept or reject non-essential cookies.

1️⃣2️⃣ Security

I use reasonable technical and organisational measures (for example, encrypted connections, access controls and secure hosting) to protect your data. No online service can ever be 100% secure, but I work to keep risks proportionate and monitored.

1️⃣3️⃣ Children

Threadwise is not aimed at children. If you are under 18, you should only use the services with permission from a parent or legal guardian.

1️⃣4️⃣ Changes

When this policy changes, the “Last Updated” date at the top will be adjusted. For significant changes, I will try to notify you through email or inside your account. If you continue using Threadwise after changes take effect, that will normally mean you accept the updated policy.