Version 2026-10-16.3 — 16 October 2026. Effective for new sign-ups from 16 October 2026. Real-money billing remains unavailable.
Change notice — 16 October 2026: Threadline is now offered for business and professional use only. See new section 1A.
This is a new contract version, not an amendment to archived acceptance evidence. Version 2026-10-07.1 and all acceptance evidence remain archived unchanged. Existing users are not required to re-accept on login. Before their first paid purchase, users whose recorded acceptance is for an older version must accept this version with the business-use confirmation; that acceptance is recorded with its version ID and timestamp. This reading copy does not activate payments.
The earlier dated supplements below are retained as historical notices; their archived originals remain unchanged. References within them to accepted bundle 2026-10-07.1 describe that historical bundle, not the version of the revised contract sections below. The current operators remain Diogo Baptista and Pedro Castro pending an effective, appropriately notified provider transfer.
Extension sign in and account connections
Supplement ID 2026-10-12.1. Applies to extension 1.7.111; Store review and owner live checks are separate from backend/download deployment.
Extension 1.7.111 lets you sign up or log in directly with Google or your email and password. After required account setup and agreement steps, the extension connects automatically. You do not generate or paste a pairing code in this version. Your web dashboard uses the same Threadline account and can remain signed in separately.
Threadline authorizes one active extension login session per account. Signing in through another extension replaces the previous extension session and revokes its refresh session. Protected extension requests must match the currently authorized session. Multiple tabs in the same Chrome profile share that extension session. Teams members use their individual accounts and seats. You can sign out the active extension from Connection in the dashboard without signing out the dashboard. Account-level session revocation and deletion controls remain available. Work already started may finish; signing out does not erase information already displayed or copied.
To maintain this connection, the extension keeps its Auth access and refresh tokens and a random connection credential in local Chrome extension storage. Newly created connection credentials are not placed in Chrome sync storage. During unfinished setup, the pending Auth session and its activation credential are stored locally until connection completes or setup is signed out. A transient Chrome session-storage preference remembers whether you chose Sign up or Log in; it contains no credentials. The server stores a hash of the connection credential, the associated Auth session identifier, account identifier, connection status and timestamps. These are necessary authentication and account-access records; this change does not add hardware fingerprinting, location tracking or browser-history collection.
Active authorization is checked against the live Auth session. It ends when replaced, signed out, revoked, deleted with the account or no longer backed by a valid Auth session. Daily cleanup removes expired temporary handshakes and ended connection records while preserving a live connection. The old two-minute code lifetime does not expire an active extension login. Older extension versions retain a compatibility handshake during rollout and should be updated. A connection created before session binding may require a fresh sign-in; the account, company profile, plan, credits and saved research are preserved.
This control limits active login sessions. It does not identify a physical person or guarantee that deliberately copied authentication credentials cannot be shared. Keep your account credentials private and use the individual accounts or seats required by your plan.
Signing in, reconnecting or repeating setup neither consumes a Reveal nor grants another Free allowance. This release does not change prices, plan entitlements, credit/refund rules, AI providers or prompts, extension permissions, professional-data collection, marketing choices, customer rights or the separate real-payment activation gate. Accepted legal bundle 2026-10-07.1 and its acceptance history remain unchanged. This dated update supplements the previous authentication, storage and security descriptions; earlier notices remain historical where superseded.
For account or privacy assistance, contact [email protected].
Saveable copy: https://app.threadlinehq.io/legal/extension-signin-update-2026-10-12.1.html
Release and privacy status for extension 1.7.110
Supplement ID 2026-10-08.3. Status confirmed on 8 October 2026; privacy controls unchanged from 2026-10-08.2.
Extension 1.7.110 retains the privacy controls described in supplement 2026-10-08.2. The update clarifies the existing insufficient-signal Reveal message when a credit has been refunded. It does not change data collection, permissions, research decisions, credit or refund rules, browser storage, or the user journey.
Extension 1.7.110 was reviewed and published on the Chrome Web Store on 8 October 2026. Chrome Web Store review is separate from LinkedIn authorisation and is not a legal or security certification.
Necessary operational records and provider-specific retention still exist. Access to specific extension-derived data remains subject to the applicable documented Limited Use exception.
This is a dated documentation and release-status update. It leaves accepted contract bundle 2026-10-07.1, prior acceptance evidence, customer rights, the existing processing purposes and published storage rules unchanged. Earlier notices below remain as history where their status statements have been superseded. The pre-existing provider-transfer and real-payment activation gate remains; no payment activation is announced by this update.
For privacy requests, including requests from prospects without an account, contact [email protected].
Save this dated update: HTML copy · Text copy.
Earlier dated notices and accepted text
Privacy update — extension 1.7.109 and aggregate founder reporting
Supplement ID 2026-10-08.2. Current control description for extension 1.7.109. Earlier accepted versions and the earlier same-day checkpoint are historical.
This update describes extension 1.7.109 and the matching backend and founder-reporting controls deployed on 8 October 2026. It supersedes the earlier 2026-10-08.1 checkpoint for these controls. Earlier notices and accepted contract versions are preserved as historical records; this update does not change contractual rights or create a new acceptance record.
In extension 1.7.109, opening a supported LinkedIn profile or the Threadline research panel reads the current professional profile locally for the existing interface. It does not send that currently viewed prospect's URL, name, company, profile identifier or profile-reference hash to Threadline merely because the page or panel opened. Account authentication, vendor settings, language, credit checks and an account-level download of previously saved Reveal results can still contact Threadline. The extension matches the current profile against those saved results locally; the lookup does not identify which profile is currently being viewed.
When you explicitly request Reveal, the professional profile information and company context required for the existing research and drafting feature are transmitted and processed normally. Previously requested in-flight Reveals can resume. Saved results, sources, generated content, explicit feedback, account access and credit/refund rules remain available under their existing controls. The change does not mean that Threadline collects no data.
Routine founder Analytics now provides aggregate usage and account administration separately. It does not expose named individual usage counts, activity times, per-person costs, prospect browsing history, individual-activity views or individual-usage exports. Small usage groups are suppressed, and account/company labels cannot be used to filter usage into individual reports. Account identity and ordinary account administration remain identifiable. Necessary raw product records and restricted operational access remain; aggregation and suppression are not an unconditional guarantee of anonymity. Human access to extension-derived data must be confined to a documented applicable Limited Use exception, such as the user's explicit consent to read specific data, necessary security work or a legal obligation.
Older extension installations can still send the earlier passive profile payload until updated. The deployed database guard continues to discard new passive profile-view inserts from those clients. Distribution of the verified 1.7.109 download does not establish Chrome Web Store review, publication or automatic installation; check the installed version. Earlier passive records were not deleted and retain the existing 180-day activity cleanup. Product/workspace records, private reporting facts, provider logs and backups have their separate retention rules. This update does not claim zero provider logging, immediate backup deletion, EU-only processing or completion of outstanding supplier/transfer evidence.
Threadline limits extension-data use to its disclosed research and drafting purpose and the related operation and security of that service. It does not sell extension data, use it for advertising or use it to determine creditworthiness. Final Chrome Web Store package/declaration reconciliation remains a separate verification step; this notice is not Chrome approval or a blanket legal-compliance certification.
For access, correction, deletion, restriction or objection requests, including requests from prospects without a Threadline account, contact [email protected]. Existing rights and contact routes continue to apply.
Save this dated update: https://app.threadlinehq.io/legal/privacy-update-2026-10-08.2.html. Download text: https://app.threadlinehq.io/legal/privacy-update-2026-10-08.2.txt.
Historical checkpoint and earlier accepted notice — preserved text
Privacy update — 8 October 2026
Supplement ID 2026-10-08.1. The existing version shown above and saved by the earlier-copy buttons is retained as the historical contract/notice version. This supplementary notice describes the current privacy change.
This dated update supplements the earlier notices reproduced below. It describes the backend privacy change deployed on 8 October 2026; it does not replace previously accepted contract versions or change your contractual rights.
When the Threadline research panel opens on a supported profile, the extension can still send the current prospect's profile URL, name and company to Threadline before you request a Reveal. From the backend update on 8 October 2026, Threadline discards these passive profile-view events before inserting them into its activity database. Transmission therefore still occurs; the update does not mean that collection starts only after Reveal.
Requested Reveal processing, saved prospects and outputs, explicit feedback, authentication and credit accounting are unchanged. Future passive panel openings no longer supply new activity records for dashboard company ranking, refresh decisions or fallback history. Existing saved prospect records remain available to the dashboard.
Earlier activity records were not deleted by this update and remain subject to the existing 180-day activity cleanup. Saved Reveal/workspace records have their separate retention rules. Provider request logs and backup copies have separate lifecycles; absence from the activity database is not a promise of zero provider logging or immediate backup deletion.
Private founder Analytics still includes identifiable account-linked usage, including activity times, feature counts and costs. Its fact dataset does not copy full prospect URLs, prompts or message content. Restricting access to founders does not make these records anonymous. The outstanding Chrome disclosure/choice and Limited Use human-access questions are not resolved by this storage change or by publishing this notice.
For access, correction, deletion, restriction or objection requests, including requests from prospects without an account, contact [email protected]. The existing rights and contact routes continue to apply.
Save this dated privacy update · Download the text copy
Revised contract terms — version 2026-10-16.3
1 Provider and agreement
Threadline is currently operated jointly by Diogo Baptista and Pedro Castro. Correspondence address: Rua Aristides Sousa Mendes n8 6o andar, 1600-413, Lisboa, Portugal. Contact: [email protected]. THREADLINE LDA was incorporated on 9 October 2026 (NIPC / matrícula 519681169); the effective transfer of the provider role to it has not yet been confirmed, so it is not the present contracting party.
These Terms cover the Threadline website, web application, Chrome extension and related services. THREADLINE LDA will become the provider only after an appropriately notified contractual transfer takes effect. Contact [email protected] for contract, support or complaint questions.
You must be at least 18 and legally capable of contracting. Threadline is supplied for business and professional use only (see section 1A). If you act for an organisation, you must have authority to bind it.
These Terms apply when validly brought to your attention and accepted in the relevant contract flow. The Privacy Notice explains processing; acknowledging it is not blanket consent to every processing activity. The Data Processing Agreement governs processing on customer instructions. The AI and Third-Party Platform Terms supplement these Terms, but cannot reduce mandatory rights.
1A Business use only
Threadline is a sales-prospecting tool supplied only for business and professional purposes, such as researching prospects and preparing sales communications for your own or your organisation's trade, business or profession. It is not offered to consumers. By creating an account, accepting these Terms or purchasing a plan, you confirm that you are acting for those purposes, including where you are a founder, sole trader or freelancer, or pay with a personal card. Do not use Threadline for purposes outside your trade, business or profession. If mandatory law nevertheless treats you as a consumer, the rights that law gives you continue to apply and nothing in these Terms limits them.
2 Service and permitted use
Threadline helps you prepare sales research and communications through Full Reveal, additional signal messages, email generation, permitted regenerations, Account Intelligence, shared briefs, monitored announcements, custom messaging prompts, writing controls and Team workspace, as available in your plan. Company settings, saved drafts and related utilities support these functions.
You may use your authorised access and generated material for lawful professional purposes, including your own business development and sales communications. We do not prohibit ordinary commercial use that the service is designed to support. You may not resell access, share credentials or collect data unlawfully.
The extension processes professional context from a profile you view; opening its panel can record a profile-view event before a Reveal. Monitored announcements can refresh selected companies from public-web sources. Threadline does not automatically send LinkedIn invitations, messages or emails on your behalf. You choose whether, where and what to send.
You need an internet connection, a compatible current browser and, for the extension, a supported Chrome environment and authorised access to the source page. Third-party changes can affect compatibility. AI and public-source output can be inaccurate or unavailable and requires human review.
3 Accounts and workspaces
Provide accurate account information and protect your credentials and devices. Notify us of suspected unauthorised access. Organisation administrators can manage members, roles, shared settings and materials according to the service’s permissions. Their internal decisions remain the organisation’s responsibility.
Workspace ownership, personal subscription and personal credit balances are distinct. Transferring a workspace does not automatically transfer a payment contract. Before closing an account that owns a workspace, transfer ownership or export material you are entitled to keep; deleting the owner’s account can delete that workspace and its dependent content. A departing member’s contribution may remain in another customer’s retained records with attribution removed where supported.
You are responsible for your authorised use, but not for consequences attributable to our breach of our own obligations.
4 Plans prices and credits
The plan and checkout or signed order specify features, included Reveals, currency, billing period, total payable price, taxes, renewal and any applicable minimum term. Consumer price information must include applicable taxes and unavoidable charges before the order is placed. A marketing price labelled excluding VAT is not a substitute for the consumer’s final total.
Free provides 5 Reveals once. Starter and Pro offer monthly or annual billing with allowances refreshed monthly. Teams is arranged by contacting Threadline, with custom pricing and Reveal limits per seat stated in the agreed order; it is not a standard self-service purchase. Existing contracts continue according to their agreed terms.
Only a Reveal consumes a Reveal credit. Included follow-up outputs remain subject to plan access and reasonable security or usage limits. Monthly plan allowances do not roll over. Purchased refill credits do not expire under the current offer. Credits are a service allowance, not cash or transferable stored value. Restoring a credit after a failed request is distinct from refunding a payment.
A paid subscription renews for its stated period until cancelled. We obtain authority for recurring charges in the payment flow. We give advance notice of material price or contract changes; changes will not retrospectively alter a paid period. You may reject future renewal by cancelling. Mandatory consumer rules on digital-service modifications and termination remain applicable.
5 Cancellation account closure and refunds
You can cancel future renewal through the available billing controls or contact [email protected] if they fail or are unavailable. Ordinary renewal cancellation generally leaves access until the paid period ends. We explain the effective date and any refund due. Statutory withdrawal and remedies for non-conformity are separate from ordinary cancellation.
You can request account closure and exercise data-protection rights without waiting for a subscription to expire. Billing obligations, lawfully retained accounting records and privacy erasure are assessed separately. Use export tools before closure where needed; contact us for records missing from the self-service export. A technical failure in a billing or deletion control does not remove your statutory rights.
Refunds required by law are provided regardless of a plan’s usual refund policy. We do not use credits, suspension, a dispute or a payment claim to exclude mandatory remedies.
6 Consumer withdrawal
Sections 6 and 7, and other provisions referring to consumers, apply only if, despite section 1A, mandatory law treats you as a consumer.
If you are an EU consumer entering a qualifying distance service contract, you may withdraw without giving a reason within 14 days after the contract is concluded. Use Withdraw from a contract in Billing, or send a clear statement to [email protected] or the postal address above before the deadline. You may use the form below but it is not compulsory. If required withdrawal information was not supplied, the statutory extended period applies.
We reimburse payments due on withdrawal without undue delay and within 14 days after receiving your notice, using the original payment method unless you expressly agree otherwise and without a refund fee.
Threadline offers a full refund of the relevant initial subscription or refill payment for a withdrawal received within 14 days of that contract. No deduction is made for use during those 14 days. This additional refund policy does not reduce any longer statutory period or other remedy. Renewal cancellation is separate; an ordinary renewal does not automatically start a new 14-day period. Starting an ongoing digital service or using a Reveal does not by itself remove the withdrawal right. If you choose immediate service at checkout, you request access during the withdrawal period. Under the full-refund policy above, Threadline does not charge a proportionate amount for that use. Loss of the right for a fully performed paid service requires the legally required prior consent and acknowledgement. Separate rules can apply to qualifying digital content. We will not treat ordinary registration, installation or a general Terms checkbox as those specific acknowledgements.
Withdrawal form: To Threadline at [email protected] or Rua Aristides Sousa Mendes n8 6o andar, 1600-413, Lisboa, Portugal. I notify you that I withdraw from my contract for the following service: [service and order reference]. Contract date: [date]. Consumer name: [name]. Consumer address: [address]. Date: [date]. Signature: [only if sent on paper].
The equivalent statutory form and instructions must accompany the contract confirmation in a durable form. Contact us in Portuguese or English. This form does not restrict other valid ways to exercise the right.
7 Consumer conformity and remedies
We must supply the digital service in conformity with the contract and applicable objective requirements, including relevant functionality, compatibility, security updates and continuity during the supply period. If it is not supplied or is non-conforming, consumers have the remedies provided by applicable law, including bringing it into conformity, an appropriate price reduction or termination when the relevant conditions are met. Free service can also attract digital-service protection where the statutory conditions apply.
Contact [email protected] describing the issue. We will not charge for a remedy that must be free by law or require you to waive mandatory rights. Portuguese law includes Decreto-Lei 84/2021 and applicable distance-contract rules. Consumers retain any more protective mandatory rules applicable in their country of habitual residence.
8 Data use outreach and acceptable conduct
Use only data and accounts you are authorised to access. Do not evade access controls, scrape in bulk, use false identities, bypass limits or interfere with service security. Do not upload secrets, irrelevant sensitive personal data, children’s data or third-party confidential information without authority for the specific processing.
Do not use Threadline for spam, harassment, stalking, deception, unlawful discrimination, impersonation, defamation or infringement. Do not infer or target sensitive traits or use output for high-impact decisions about employment, lending, insurance, housing, health or similar matters.
Public professional information is still personal data. If you determine why prospects are researched or contacted, establish a lawful basis, give required indirect-collection notices, minimise and correct data, set retention and honour rights and suppression. A GDPR legitimate interest in research does not automatically permit electronic marketing. Portuguese rules can require prior consent for messages to natural persons, including professional recipients; narrow existing-customer exceptions have conditions. Check the applicable recipient-country and channel rules before sending.
9 LinkedIn and other third parties
Threadline is independent from LinkedIn and is not sponsored or approved by it. Your use of LinkedIn and other third-party platforms remains subject to their own terms, and you are responsible for complying with them. A platform may change, restrict or block features or your account. We do not guarantee uninterrupted access or platform permission.
We remain responsible for our own product design and conduct. These Terms do not shift Threadline’s statutory obligations to you. We may suspend or redesign a feature where reasonably necessary for a legal, security or platform issue, with appropriate notice and consumer remedies where required.
10 AI content ownership and confidentiality
You retain the rights you have in submitted content. You authorise us to host, process, transform and transmit it as needed to provide, secure and support the service and comply with law. This does not transfer ownership of your confidential company information to us or give us rights in third-party material that you do not hold.
Subject to applicable law and third-party rights, you may use generated outputs for lawful business purposes. Outputs may not be unique or protected by copyright; verify factual claims and source rights before publication. We retain rights in the service’s software, interface, branding and underlying technology, excluding your content and third-party rights.
We protect non-public customer information with reasonable care and disclose it only to authorised personnel and providers for the relevant purpose or where law requires. A user who shares a public brief authorises access by anyone possessing the link until expiry or revocation. Recipients can forward or copy it; revocation cannot recall their downloaded copies.
11 Availability changes suspension and termination
We provide the service with reasonable skill and care. No separate uptime SLA applies unless agreed. Dependencies and maintenance can affect availability. Changes to a consumer digital service beyond those needed for conformity require a contractual valid reason, no additional cost and the legally required information and remedies; any material negative impact triggers the rights provided by applicable law.
We may suspend access proportionately for a material breach, security threat, unlawful use or non-payment. Where practicable and lawful, we explain the reason and provide a way to challenge or remedy it. You may contact us to terminate under these Terms or statutory rights. Data return, retention and deletion follow the Privacy Notice and DPA where applicable.
12 Liability and disputes
Nothing excludes or limits liability that cannot lawfully be excluded, including mandatory consumer and data-protection rights, fraud, wilful misconduct or other protected liability. For consumers, liability and remedies remain governed by applicable mandatory law.
For business customers only, and subject to those exceptions, neither party is liable for indirect or consequential loss; aggregate contractual liability is limited to fees paid or payable for the service in the 12 months preceding the event, unless an agreed order or DPA provides otherwise. No cap limits a data subject’s rights against a liable party under the GDPR. These clauses remain subject to applicable Portuguese rules on standard terms and non-excludable fault.
Portuguese law governs. Business disputes are subject to competent Lisbon courts unless agreed otherwise. Consumers retain the courts and mandatory protections available under applicable law, including those of their habitual residence. Contact us first if you wish, without losing any right to complain or bring proceedings.
For eligible disputes within its competence, the Centro de Arbitragem de Conflitos de Consumo de Lisboa provides information at https://www.centroarbitragemlisboa.pt/. Other competent Portuguese ADR bodies are listed by the Ministry of Justice at https://dgpj.justica.gov.pt/Resolucao-de-Litigios/Arbitragem/Centros-de-Arbitragem-apoiados. We do not claim voluntary membership or adherence that has not been confirmed. Mandatory consumer arbitration rights, where applicable, remain unaffected.
Threadline contracts only with business users (section 1A). Complaints can be sent at any time to [email protected]. If mandatory law treats you as a consumer, you may also use the competent consumer dispute-resolution bodies listed above. Do not use the discontinued EU ODR platform as a complaint route.
13 Contract documents and changes
A negotiated order prevails only for an express, lawful variation; the DPA prevails for processor obligations. Mandatory consumer law always prevails. We communicate material changes and do not make them retroactive. A change of corporate operator requires appropriate information and any legally required arrangements; incorporation itself does not complete a transfer of this contract.
Extension account creation
You can create a Free account in the Chrome extension with an email address and password and complete the same company setup there. The account is activated immediately without an email code or activation-link step; an informational acknowledgement is sent by email. Activation does not establish ownership of the supplied mailbox. Provide an email address you control. The same account and its one-time allowance of five Free Reveals are used in the extension and web dashboard. Signing in through another surface, reconnecting or repeating setup does not create another allowance. Paid upgrades remain in the web application and its separate checkout flow.
Optional Google sign-in
Continue with Google is an alternative to email/password registration and sign-in in the web application and Chrome extension. When creating an account, the notice beside the registration action links to these Terms and the Privacy Notice and states: "By continuing, you agree to the Terms and Privacy Notice and confirm you are using Threadline for business purposes." This business-use confirmation is stored with the acceptance record. Choosing Register, Create Account or Continue with Google after that notice is the affirmative action accepting these Terms for a new account; no separate checkbox is required. The Privacy Notice explains processing and rights, rather than asking for blanket privacy consent. Returning users with a recorded current or explicitly compatible agreement sign in without accepting it again. A material contractual change requiring acceptance is presented separately before agreement is recorded. Marketing emails and new marketing opt-ins are currently disabled. Account, security and service emails remain available. Google authenticates you in its own window or page. You do not give Threadline your Google password. A new Google account receives the same Free allowance and company onboarding, and can use the same Threadline account on both surfaces. Existing accounts and their balances are not reset by signing in again. For security, an existing password account without verified mailbox ownership cannot be automatically linked solely by matching its email. Use that account's password sign-in or contact support.