Last updated:
Mar 5, 2025
HyperThreads ("we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, and share information about you when you visit our website, hyperthreads.ai (the "Site").
1. Information we collect
We collect information you provide, information from your use of the Service, and information from third-party services we use.
Account and profile
Email address, display name, and profile picture (from our authentication provider, Clerk)
Team or organization membership and role (e.g., admin, designer, member)
Content and usage
Garments, projects, artworks, prompts, and metadata you create or upload
Technical flats, artwork files, and other uploads
AI-generated images and related metadata
Token usage, feature usage, and storage consumption
Logs and diagnostics (e.g., for errors and performance, via Sentry)
Payment
Payment is processed by Stripe. We do not store full payment card numbers. Billing details (e.g., billing address, last four digits) and transaction history may be stored as needed for billing and support. Stripe’s privacy policy applies to payment data: Stripe Privacy Policy.
Device and technical data
IP address, browser type, device information, and similar technical data when you use the Service
2. How we use your information
We use the information we collect to:
Provide, operate, and improve the Service
Process payments and manage subscriptions and token usage
Authenticate you and manage teams and access
Respond to support requests and communicate with you
Ensure security, prevent abuse, and comply with legal obligations
Analyze usage in aggregate or anonymized form to improve the Service
We do not use your content to train AI models. We do not train models on your uploads or generations. For how third-party AI providers handle data:
Replicate: See Replicate Privacy Policy. “Training Data” there refers to data uploaded to train models; we use Replicate for inference (generation) only.
Google Vertex AI: Per Vertex AI and zero data retention, Google does not use your data to train or fine-tune models without your permission; zero data retention options exist. We have disabled in-memory data caching on our Vertex AI project to avoid temporary retention of your prompts or images for performance optimization.
3. Sharing your information
We share information only as needed to provide the Service, comply with law, or protect rights and safety. We do not sell your personal information.
Service providers
Clerk – Authentication and user/org management (Clerk Privacy)
Supabase – Database and file storage (Supabase Privacy)
Replicate – AI image generation (Replicate Privacy)
Google Vertex AI – AI image generation (Google Cloud Data Processing)
Stripe – Payment processing (Stripe Privacy)
Sentry – Error and performance monitoring (Sentry Privacy)
Legal and safety
We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of HyperThreads, our users, or the public.
Business transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy commitments.
4. Data retention
We retain your information for as long as your account is active or as needed to provide the Service and comply with legal obligations. After you delete your account or request deletion, we will purge your personal data and content within a reasonable period (e.g., 30–90 days), except where we must retain data for legal, regulatory, or dispute-resolution purposes.
5. Your rights
Depending on where you live, you may have the right to:
Access – Request a copy of the personal data we hold about you
Correction – Request correction of inaccurate or incomplete data
Deletion – Request deletion of your personal data
Portability – Request a copy of your data in a portable format
Restrict or object – Restrict or object to certain processing (where applicable)
Withdraw consent – Where we rely on consent, withdraw it at any time
Complain – Lodge a complaint with a supervisory authority (e.g., in the EEA/UK)
To exercise these rights, contact us at the address or email below. We will respond within the time required by applicable law. For more on how we approach GDPR and related compliance, see our GDPR and compliance note.
California and other US states: We do not “sell” or “share” personal information as defined under the CCPA and similar state laws. You may have the right to know, delete, correct, and opt out of certain uses; contact us to exercise these rights.
6. International transfers
Your information may be processed in the United States and other countries where our service providers operate. If you are in the European Economic Area (EEA) or the United Kingdom (UK), we ensure appropriate safeguards (such as standard contractual clauses or adequacy decisions) for transfers outside the EEA/UK, as described in our GDPR and compliance note and, where applicable, in a data processing addendum.
7. Children
The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected such information, we will delete it promptly. If you believe we have collected a child’s information, please contact us.
8. Security
We use reasonable technical and organizational measures to protect your information against unauthorized access, loss, or alteration. No system is completely secure; you provide information at your own risk.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy and, for material changes, provide notice (e.g., in-app or by email) where practicable. The “Last updated” date at the top indicates the effective date. Your continued use of the Service after the change constitutes acceptance.
10. Contact
For privacy-related requests, questions, or complaints:
HyperThreads LLC
3828 Emerald Estates Circle
Apopka, Florida 32703
Email: Use the contact address published on the Service (e.g., privacy@ or support@).
For EEA/UK users, you may also have the right to lodge a complaint with your local data protection supervisory authority.
