Privacy Policy
Last updated · November 2026
ThreadScanner is engineered around local processing. Both the browser extension and the MCP server inspect email on your own device; the contents of the messages and attachments you analyze are not transmitted to ThreadScanner servers. This Privacy Policy explains the limited personal data that Artificially Employed LLC, a Wyoming limited liability company doing business as ThreadScanner (“ThreadScanner,” “we,” “us”), processes in connection with this website, subscriptions, and software licensing, along with the controls available to you.
1. Summary
- Email content stays on your device. ThreadScanner does not send the email bodies, attachments, or raw MIME you analyze to our servers.
- Minimal account & license data. We collect only what is needed to respond to sales/support inquiries, process Stripe payments, and issue or renew licenses.
- No ad tech or tracking pixels. We do not sell personal data, and this site runs zero third-party analytics, advertising scripts, or external font trackers.
- Cloud AI is opt-in and bring-your-own-key. When you configure a cloud AI provider for optional second-opinion summaries, requests travel directly from your device to the provider you chose under their terms.
2. Data controller & contact
The data controller is Artificially Employed LLC (doing business as ThreadScanner, a Wyoming limited liability company; c/o Registered Agent, 30 N Gould St Ste N, Sheridan, WY 82801 — State of Wyoming, USA). For privacy questions or data-subject requests, contact admin@threadscanner.ai. For security disclosures, contact security@threadscanner.ai.
3. Information we process
3.1 Website & sales inquiry form
When you submit the inquiry form on our website, we collect your email address and any optional details you provide (organization, team size, and message). We use this information to reply to your request. Standard HTTP request metadata (IP address, user agent, approximate country, and referrer) is processed transiently for delivery and abuse prevention.
3.2 Subscriptions & billing
Payments are processed by Stripe. Payment card numbers are entered directly on Stripe Checkout or the Stripe Billing Portal and are never received or stored by ThreadScanner. Stripe shares limited billing metadata with us (purchaser email, plan tier, seat quantity, subscription status, and Stripe customer and subscription identifiers) so we can provision, renew, and manage your license.
3.3 Licensing
Our license registry stores your license identifier, plan tier, seat count, organization name (if provided), billing email, active/revoked status, paid-through period, and associated Stripe identifiers.
Subscription licenses carry a rolling cryptographic expiration window within the paid
billing period. During the final week before a token’s expiration date, the
browser extension and MCP server exchange the current token for the next window’s
token by sending only the license key to our renewal endpoint (at most once per day).
Automatic refresh can be disabled via TS_LICENSE_REFRESH=0 or
--offline, and offline purchase-order licenses do not contact the renewal
endpoint.
3.4 Software updates
Browser extension updates are distributed through the official browser extension store (such as the Chrome Web Store), and MCP server updates are distributed through the npm registry.
3.5 Email content analyzed on your device
Email headers, bodies, compose drafts, attachments, and raw MIME messages are parsed locally on your machine. To display instant verdicts, support rescanning, and power user-initiated security reporting, the browser extension keeps bounded local snapshots of up to 100 recent scanned messages in local browser extension storage under your control (which you can clear at any time in Settings). None of this content is sent to ThreadScanner. If you explicitly enable an optional AI second-opinion provider using your own API key, a redacted summary is sent directly from your device to your chosen provider.
3.6 Domain intelligence & threat-feed lookups
On the Free tier or when offline mode is enabled, checks run locally without external reputation lookups. On licensed plans (or when online lookups are enabled in Settings), the client queries domains, URLs, or SHA-256 attachment hashes found in a message — never message text or raw attachment files — directly from your device against the services that answer them: DNS resolvers, RDAP registration servers, certificate-transparency logs, URLhaus, Spamhaus, PhishTank, optional APIs you configure with your own keys (such as VirusTotal, Google Safe Browsing, or urlscan.io), and redirect hops when link unwrapping is permitted. Every lookup category can be toggled off in Settings at any time.
Shared team sender history (Team and Business plans, off unless enabled) sends a license-keyed HMAC-SHA256 digest of a sender address together with your signed license token so team members can detect first-contact senders across seats. We store only the keyed digest, timestamps, and count.
4. How we use personal data
- To respond to sales, enterprise, and support inquiries.
- To process subscriptions, issue and renew licenses, and prevent fraud or abuse.
- To send transactional license keys, receipts, and service notices.
- To maintain security and comply with tax, accounting, and legal obligations.
Where GDPR or similar frameworks apply, we rely on performance of a contract, legitimate interests in operating and securing the service, consent (for optional features and inquiries), and compliance with legal obligations.
5. Sub-processors
We use a minimal set of infrastructure providers to run our website, billing, and licensing endpoints:
- Cloudflare, Inc. — website hosting, Pages Functions execution, and D1 license registry storage.
- Stripe, Inc. — subscription checkout, invoicing, and payment processing.
- Resend (Plus Five Five, Inc.) — transactional email delivery for license keys and support inquiries.
Optional third-party services you connect directly on your device (such as Google Gmail API, Microsoft Graph, Anthropic, OpenAI, Google Gemini, xAI, or VirusTotal) operate under your own credentials and those providers’ respective privacy policies. Enterprise customers may request a signed Data Processing Agreement (DPA).
6. Data sharing
We do not sell personal data or share it for cross-context behavioral advertising. We disclose data only to the sub-processors listed above, when required by applicable law, or in connection with a corporate transaction with notice as required by law.
7. Data retention
Inquiry emails are retained only as long as needed to assist you or until you request deletion. License and billing records are kept for the duration of an active subscription and as required for tax, audit, and legal compliance. Local scan state stored in local browser extension storage or local configuration files remains solely on your machine and can be cleared at any time.
8. Security
We protect licensing and billing endpoints with TLS in transit, Ed25519 asymmetric
token signing, Stripe webhook signature verification, and least-privilege browser
extension permissions. Credentials configured on your device are stored in local-only
browser extension storage or owner-only local configuration files (mode
0600 where supported) and are never synced across browser profiles.
9. International transfers
Our infrastructure providers may process limited billing and license metadata in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.
10. Your privacy rights
Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict processing of your personal data. Email admin@threadscanner.ai to exercise these rights, and we will respond within the timeframe required by applicable law.
11. Children
ThreadScanner is software for professional and personal email security and is not directed to children under 16.
12. Policy updates
We may update this Privacy Policy periodically and will revise the “Last updated” date at the top of this page when changes are published.
13. Contact
Artificially Employed LLC (d/b/a ThreadScanner)
c/o Registered Agent · 30 N Gould St Ste N, Sheridan, WY 82801, USA
Privacy & support: admin@threadscanner.ai
Security: security@threadscanner.ai