Privacy Policy
threadOS turns your product photographs into commercial imagery. That means we hold the photographs you upload, the images we generate from them, and the account they belong to. This page says exactly what that is, who else touches it, and how to get rid of it.
Who we are
threadOS is operated by Artifex AI Creative Technologies. For any question about your data, or to exercise any of the rights below, write to [email protected].
What we collect, and why
We collect four things, and nothing else. There is no advertising identifier, no tracking pixel and no analytics SDK in this product.
1. Your account
When you sign in with Google or Apple we receive and store your name, email address, profile picture URL and the provider's permanent identifier for you. We never see or store a password — authentication happens entirely at Google or Apple.
Why: to know whose workspace you are opening, to attribute work to you inside a shared workspace, and to contact you about the account.
2. What you upload and what we make
- The product photographs you upload, and the reference images you add to a moodboard.
- The images we generate from them, including every revision.
- The text you write about your brand: its DNA answers, collection themes, casting briefs, revision notes and comments.
Why: this is the product. Without it there is nothing to generate from and nothing to show you afterwards.
We strip camera metadata — GPS coordinates, device model, timestamps — from every image before it is stored. A photograph taken at home does not carry your address into our storage.
3. How you use the studio
We record which images you favourite, export or ask to be revised, and roll that up into which styles perform well for your brand.
Why: it is what lets the studio recommend what to shoot next instead of asking you. It is per-workspace and never compared against another customer's.
4. Credits and payment
We store your plan, your credit balance, and a ledger of every credit granted or spent. If you buy credits we store the order and the payment provider's confirmation. We never receive or store card details — those go directly to the payment provider.
Who else touches your data
Generating an image means sending your product photograph to an AI provider. We use as few as possible, and none of them are advertising companies.
| Who | What they receive | What for |
|---|---|---|
| Google (Gemini) | Your product photographs, the text prompt, and the briefs, themes and brand descriptions you write | Generating images, reading what is in a photograph, and the agents that plan a shoot |
| Google (Sign-In) | Nothing from us — they verify your identity to us | Signing in |
| Apple (Sign in with Apple) | Nothing from us — they verify your identity to us | Signing in |
| iyzico Ödeme Hizmetleri A.Ş. | Your name, email and the order amount — and your card details, which you give to them directly and we never see | Taking payment for credits |
| Amazon Web Services (Frankfurt) | Everything, at rest | Hosting the servers and the database |
| Resend | Email address and the message | Sending invitations and account email |
We do not sell your data, and we do not share it with anyone not on this list.
Where it is kept, and for how long
Data is stored on servers in the European Union. We keep it for as long as your account exists. When you delete your account it is removed immediately and permanently — see below.
Our AI providers may retain a request briefly for abuse monitoring under their own terms; we do not control that window and do not ask them to train on your images.
Your rights
- Delete your account. Settings → Account → Delete account. This permanently removes your account, your products, every generated image, your brand DNA and your credit history. If you are the only person in your workspace, the workspace goes too. It cannot be undone.
- Delete one thing at a time. Any product or any generated image can be deleted on its own, from the product and asset views.
- Get a copy of your data. Email us and we will send you everything we hold about you.
- Correct it. Your name, your products and their tags are all editable in the studio.
- Object or complain. Write to us first. Under Turkish law (KVKK) you may also complain to the Personal Data Protection Authority; under the GDPR, to your local supervisory authority.
Cookies
One cookie, and it is the session: an HttpOnly cookie that says you are signed in. It is not readable by JavaScript, carries no profile, and expires after seven days. There are no advertising or analytics cookies in this product, which is why there is no cookie banner — there is nothing to consent to beyond signing in.
Children
threadOS is a tool for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.
Changes
If we change what we collect or who we send it to, we will update this page and change the effective date at the top. Material changes will also be emailed to you.
Security
The site and the API are served over HTTPS with a valid SSL certificate, and the session cookie is marked HttpOnly and Secure. Card data never enters our systems.
See also our Terms of Service and the Distance Sales Agreement.