Privacy Policy

Effective Date: October 1, 2025

Last Updated: April 5, 2026

Thread Sourced LLC ("Threadsourced," "we," "us," or "our") is committed to protecting the privacy of every user of our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at threadsourced.com, use our web and mobile applications, or interact with our services (collectively, the "Service"). This Privacy Policy is part of, and subject to, our Terms of Use.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Service.

1. Information We Collect

Information You Provide

When you register for an account, subscribe to the Service, or contact us, we may collect: your name, email address, phone number, and business name; your business address and tax identification information; payment and billing information (credit card, ACH/bank account details); store location details, employee information, and business configuration; and any other information you voluntarily provide, including messages, notes, and support requests.

Information Generated Through Your Use of the Service

As you use the Service, the following data is created and stored: Customer Data — your customer records, individual sales transactions, order details, inventory levels, purchase orders, work orders, and employee information; and Usage Data — information about how you interact with the Service, including features used, pages visited, session duration, clicks, browser type, device information, IP address, and performance metrics.

Information Collected Automatically

We automatically collect certain technical information, including: IP address, browser type, and operating system; device identifiers and configuration; referring and exit URLs; and cookies, local storage, and similar tracking technologies (see Section 8).

2. How We Use Your Information

We use the information we collect to: provide, operate, and maintain the Service; process transactions and manage your subscription; communicate with you about your account, updates, and support requests; improve and develop new features based on usage patterns; generate Aggregate Data (defined below) for analytics, benchmarking, and reporting; detect, prevent, and address fraud, abuse, and technical issues; comply with legal obligations and enforce our agreements; and send you relevant product updates and notifications (with opt-out available).

3. Aggregate Data

Aggregate Data means anonymized, de-identified data derived from Customer Data and Usage Data that cannot reasonably be used to identify any individual, customer, or specific business. We may collect, create, use, and share Aggregate Data for any lawful purpose, including: industry benchmarking and trend analysis (e.g., regional sales trends, seasonal inventory patterns); product development and Service improvement; anonymized reports shared with manufacturer and vendor partners; and market research and analytics publications. Aggregate Data will never identify you, your business, your customers, or any individual. You may opt out of having your data included in manufacturer-shared aggregate reports by contacting support@threadsourced.com.

4. What We Will NOT Share

We are committed to protecting your most sensitive data. We will never sell, share, or disclose: your individual customer records or customer personal information; individual sales transaction details or order-level data; employee personal information; or your login credentials or authentication tokens. These protections apply to all third parties, including our manufacturer and vendor partners, except where strictly necessary to fulfill a transaction you have initiated (e.g., sharing a shipping address with a carrier to deliver an order) or where required by law.

5. Sharing with Third-Party Service Providers

To operate the Service, we share certain information with trusted third-party service providers. The categories of providers and information shared include:

Payment processors (e.g., ValorPay, Stripe) — your business contact information, billing details, and transaction amounts necessary to process subscription payments and customer credit card transactions on your behalf.

Manufacturer and vendor partners — your business name, contact information, and account numbers necessary to synchronize product catalogs, process purchase orders, and manage vendor relationships. We do NOT share your customer data or individual sales data with manufacturers.

Shipping and logistics providers — order recipient names and shipping addresses necessary to fulfill and deliver orders.

Communication providers (e.g., email and SMS services) — recipient contact information necessary to send transactional notifications on your behalf (order confirmations, shipping updates, etc.).

Cloud infrastructure and hosting providers — all data stored in the Service is hosted on secure cloud infrastructure. These providers process data on our behalf under strict data processing agreements.

Analytics and monitoring tools — anonymized Usage Data to help us understand Service performance and usage patterns.

All third-party service providers are contractually required to maintain the confidentiality of your information, use it only for the purposes for which it was disclosed, and maintain appropriate security measures.

6. Data Security

We implement industry-standard security measures to protect your information, including: encryption of sensitive data in transit (TLS/SSL) and at rest; encryption of stored payment credentials and authentication tokens; role-based access controls limiting employee access to data; regular security assessments and monitoring; and secure cloud infrastructure with redundancy and backup procedures. No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Upon account termination, you have ninety (90) days to export your Customer Data. After this period, we will delete your Customer Data in accordance with our retention schedule, except where retention is required by law or for legitimate business purposes (e.g., billing records, dispute resolution). Aggregate Data derived from your use of the Service may be retained indefinitely, as it cannot be used to identify you.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to: maintain your session and authentication state; remember your preferences and settings; analyze Service usage and performance; and detect and prevent fraud. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service. We do not respond to "Do Not Track" browser signals at this time.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information: Access — request a copy of the personal information we hold about you; Correction — request correction of inaccurate or incomplete information; Deletion — request deletion of your personal information, subject to legal retention requirements; Data Portability — request your data in a structured, machine-readable format; Opt-Out — opt out of aggregate data sharing with manufacturer partners; and Unsubscribe — opt out of non-essential communications via unsubscribe links in emails. To exercise these rights, contact us at support@threadsourced.com. We will respond within thirty (30) days.

10. Children's Privacy

The Service is not intended for individuals under eighteen (18) years of age. We do not knowingly collect personal information from children under thirteen (13). If we learn that we have collected information from a child under 13, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at support@threadsourced.com.

11. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to such transfer and processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a prominent notice in the Service at least thirty (30) days before taking effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Thread Sourced LLC — hello@threadsourced.com — 1.877.808.2348 — support@threadsourced.com