Privacy Policy

1. Introduction

ThreadM ("we", "our", or "the Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our B2B marketplace at threadm.in. By using ThreadM, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly when you register or use the platform:

• Full name, email address, and mobile number
• Business name, business type, and GST number
• Product listings including photos, descriptions, and pricing
• Messages and enquiries exchanged between buyers and suppliers

We also automatically collect technical usage data including pages visited, device type, browser type, and IP address for security, fraud prevention, and analytics purposes.

3. How We Use Your Information

• To create and manage your account on ThreadM
• To connect buyers with verified suppliers and facilitate B2B enquiries
• To send transactional communications (account verification, enquiry notifications, platform updates)
• To power AI features including product tagging, search, and recommendations
• To improve the platform and personalise your experience
• To detect, investigate, and prevent fraud, spam, and abuse
• To comply with applicable legal obligations under Indian law

4. Information Sharing

We do not sell your personal information to any third party. Information is shared only in the following circumstances:

• Between platform users: Business name, product details, and enquiry messages are shared as part of the marketplace function between buyers and suppliers
• Infrastructure providers: We use Supabase (database and authentication, servers located in the United States), Vercel (hosting and edge network, global CDN), and Groq (AI inference, United States) — all operating under strict data processing agreements and industry-standard security practices
• Legal obligations: Where required by Indian law, court order, or government authority
• Business transfers: In the event of a merger or acquisition, your data may be transferred to the new entity under the same privacy commitments

By using ThreadM, you acknowledge that your data may be processed by our service providers outside India. We ensure all such transfers are protected by appropriate contractual safeguards.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data storage and HTTPS-only connections across the platform
• Row-level security on our database — each user can only access their own data
• Secure authentication with token-based session management
• Regular security reviews and access controls

No system is completely immune to security risks. We encourage you to use a strong, unique password and keep your credentials confidential. If you suspect unauthorised access to your account, contact us immediately at privacy@threadm.in.

6. Your Rights

As a ThreadM user, you have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate information via your account settings
• Deletion: Request deletion of your account and personal data
• Opt-out: Unsubscribe from marketing communications at any time
• Portability: Request your data in a structured, machine-readable format

To exercise any of these rights, email us at privacy@threadm.in. We will respond within 30 days of receiving your request.

7. Cookies

ThreadM uses essential cookies only — to maintain your login session and remember your display preferences (such as dark mode). We do not use advertising cookies, tracking pixels, or third-party analytics cookies that follow you across other websites.

8. Data Retention

We retain your account data for as long as your account remains active. If you delete your account, we will permanently delete your personal data within 30 days.

Certain data may be retained beyond this period where required by law — for example, transaction records and GST-related data may be retained for up to 7 years in compliance with Indian tax law. Such retained data will not be used for any commercial purpose.

9. Children's Privacy

ThreadM is a B2B platform intended for business use by adults aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor has registered, we will promptly delete their account and associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email or by posting a notice on the platform at least 14 days before the changes take effect. Continued use of ThreadM after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, data requests, or concerns, please contact us: