Privacy

ThreadCase is operated by Dom Ward, trading as threadcase.dsl4.com, and Dom Ward is the data controller for all personal data processed through this service. If you have questions or wish to exercise your data protection rights, you can contact us at dom.ward1@gmail.com. This notice describes how we collect, use and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018

The data we collect includes your email address, the case data and documents you choose to upload (which may include contracts, correspondence, medical records and other sensitive materials), and usage behaviour data collected via PostHog, our analytics provider. Document content is never included in analytics events. The legal basis for processing your account and case data is Article 6(1)(b) UK GDPR — processing necessary to perform the contract you have entered into with us by creating an account

Usage analytics are processed on the basis of Article 6(1)(f) — our legitimate interest in understanding how the service is used and preventing fraud. Where you upload documents that may contain special category data, such as medical records or details relating to legal proceedings, that data is processed solely to provide the service you have requested, on the basis of your explicit consent given at the point of upload under Article 9(2)(a) UK GDPR. We use the following third-party processors, each bound by a data processing agreement: Railway (infrastructure hosting — your case data and files are stored on Railway servers); OpenAI (AI fact extraction on paid plans only — document content is transmitted to OpenAI solely to perform extraction and is not used to train models); Stripe (payment processing); Resend (transactional email delivery); and PostHog (usage analytics, operated from PostHog's EU cloud at eu.i.posthog.com using cookieless tracking with no document content)

Your data is retained for as long as your account remains active. If you request account deletion, your account data, case data and uploaded files are permanently deleted within 30 days of the request. You have the right to access, rectify or erase your personal data, to restrict or object to its processing, and to receive a portable copy of the data you have provided

You can exercise these rights at any time through Account → Privacy & data, or by emailing dom.ward1@gmail.com. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk. We do not sell your data to any third party, and your document content is never used to train AI models.