Thank you for using Thread. Thread reads the documents in a deal's data room, runs diligence against your investment thesis, and surfaces what needs a decision. The data you trust us with is among the most sensitive there is, so protecting it is core to how we operate.
This Privacy Policy explains what we collect, how we use it, and the commitments we make about your data. "Thread," "we," "our," and "us" mean Thread by M&A Science Inc. It covers threadma.com and the Thread application and related services (the "Services").
By using the Services, you agree to this Privacy Policy and our Terms of Service.
Effective date: June 7, 2026 · Last updated: June 7, 2026
Information we collect
Account information. When you create an account, we collect basic details such as your name, work email, company, and role. If you sign up through a third-party login (for example Google or a single sign-on provider), we receive the account identifier needed to authenticate you.
Deal content. To run diligence, you connect a data room or upload documents and data. We call everything you bring into the Services for a deal your "Content." Your Content is yours. You control what goes in, who on your team can see it, and when it comes out. Our commitments on Content are described in their own section below.
Payment information. Paid deals are billed through a third-party payment processor. We do not store full card numbers; the processor handles card data and shares limited billing details with us to manage your account.
Usage information. We collect basic information about how the Services are used, such as log data, device and browser type, pages and features used, and timestamps. We use a small set of cookies and similar technologies to keep you signed in and to understand and improve the Services. You can control cookies through your browser settings.
What we do with your Content
These commitments are the heart of this policy.
- We never use your Content to train AI models. Your documents, findings, and decisions are never used to train any artificial intelligence or machine learning model, ours or a provider's. Your data works for your deals only.
- Your data is isolated. Each customer's deals are walled off from every other customer's, enforced at the database level, so one firm's data is never reachable by another.
- We access your Content only when we need to. We access or use your Content only to provide the Services to you, where you explicitly approve it (for example during a support request), where necessary to keep the Services secure and stable, or where required by law.
- You control retention. Content is processed for your deal and kept only while you keep that deal or your account active. When you delete a deal or close your account, its documents and the data derived from them are removed, subject to limited backup or legal-retention requirements.
- A person always decides. Thread produces findings and recommendations. It does not execute consequential actions on its own. The judgment stays with you.
How we use information
We use the information we collect to:
- Provide, operate, and secure the Services, including reading your data room, running diligence, and producing readouts for your deal.
- Create and administer your account and authenticate you.
- Bill you and manage payments.
- Respond to your requests and provide support.
- Communicate with you about the Services, including product updates and, with your consent, occasional marketing. You can opt out of marketing messages at any time; you may still receive necessary account and legal notices.
- Improve the Services using usage information, and using only aggregated and anonymized data that cannot be tied back to you, your account, or your Content.
How we share information
We do not sell your information. We share it only in these cases:
- Service providers (subprocessors). We use a small number of trusted vendors to run the Services, including cloud hosting, database and storage, the AI model provider that powers the analysis, and payment processing. They may process your information only to provide their part of the Services to us, under confidentiality and data-protection obligations. A current list of subprocessors is available on request.
- With your direction. When you connect a third-party data room or service, we exchange the information needed to carry out what you asked us to do.
- Legal and safety. When required to comply with law or a lawful request, or to protect the rights, safety, or property of you, us, or others.
- Business transfer. In connection with a merger, acquisition, financing, or sale of assets, in which case we will continue to protect your information consistent with this policy.
- Aggregated and anonymized data, which cannot be associated with you or your Content, for any legitimate business purpose.
How we protect your information
We use appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and customer isolation. No system can be guaranteed perfectly secure, but we work continuously to protect your data and your deals. If you believe your information may not be secure, contact us at hello@threadma.com.
Your choices and rights
- Access and update. You can view and update your account information from your account settings, and you control your Content directly within the Services.
- Deletion. Delete a deal to remove its Content and derived data, or close your account to delete the personal information associated with it, subject to limited backup or legal-retention requirements. For help, contact hello@threadma.com.
- Marketing. Unsubscribe from any marketing email, or contact us to opt out.
- Cookies. Manage cookies through your browser settings.
Depending on where you live, you may have additional rights over your personal information, such as the right to access, correct, delete, or port it, or to object to or restrict certain processing. To exercise any of these, contact us at hello@threadma.com and we will respond as required by applicable law.
Data location
We are based in the United States and process and store information on servers in the United States. If you use the Services from outside the United States, you consent to processing your information in the United States.
Children
The Services are for business use and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at hello@threadma.com and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. If a change is material, we will let you know, for example by email or a notice in the Services. The current version will always be posted here.
Contact us
Questions about this Privacy Policy or your information:
Thread by M&A Science Inc.
300 N. State St. #3033
Chicago, IL 60654
hello@threadma.com