Threshmark Redact Privacy Policy

DRAFT v0.1, 2026-09-22. For counsel review before publication. Not legal advice. Placeholders to confirm: support and privacy contact email, physical postal address, production domain (assumed redact.threshmark.com), effective date.

Effective date: [effective date]

This policy explains how Threshmark, LLC, a Virginia limited liability company ("Threshmark," "we," "us"), handles information in connection with Threshmark Redact (the "Service"), available at [redact.threshmark.com]. It does not cover Threshmark's consulting services or other websites, which have their own terms.

The short version

Threshmark Redact removes sensitive information from your documents. The redaction runs entirely in your web browser. Your document content, the files you redact and the sensitive values inside them, never leave your device and are never sent to Threshmark or anyone else. We enforce this in the product with a Content Security Policy that blocks the browser from sending document content anywhere, and you can verify it live on our /privacy-proof page.

We do collect the ordinary information needed to run an account, bill a subscription, understand site usage, and send messages you ask for. This policy describes that information.

Information we collect

Account information. When you create an account we collect your email address, any name you provide, and authentication details. We use a personal or team workspace ("tenant") to organize your access.

Payment information. Subscriptions are processed by Stripe. Stripe collects and holds your card details; Threshmark does not receive or store full card numbers. We receive limited billing information such as your subscription status, plan, and the last four digits and brand of your card.

Usage analytics. To understand how the site is used and to measure our marketing, we record page views and a small set of named conversion events (for example, sign-up). We store an anonymous identifier in your browser's local storage (tm_fp) and a session identifier, and we record any marketing campaign parameters (utm values) in the address you arrived from. Our anonymous demonstration page does not send any of this; capture runs only on our marketing and application pages. See our Cookie and Tracking Notice for detail and how to opt out.

Marketing contacts. If you ask for product updates, request early access, or contact us, we store your email address and your consent status so we can send what you asked for and honor unsubscribe requests.

Redaction audit metadata. So you can keep a record of what the Service did, we store counts only: how many items of each type were redacted, the policy version used, timing, and the engine version. We do not store your document content, the redacted values, or file sizes. We do not store file names unless your workspace turns that option on, which is off by default and labeled where you turn it on.

What we do not collect. We do not collect, receive, or store the documents you redact, the text inside them, or the specific sensitive values the Service finds. That content stays on your device.

How we use information

We use the information above to provide and secure the Service, create and manage your account, process and renew your subscription, provide support, measure and improve the site and our marketing, send messages you have asked for or that concern your account, and comply with law.

How we share information

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only with service providers that help us run the Service, under contracts that limit their use of it:

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer, in which case we will tell you.

Cookies and tracking

We use browser local storage and first-party analytics as described in our Cookie and Tracking Notice, which also explains how to decline non-essential tracking. The redaction workspace itself uses local storage only to hold your work and cached assets on your device.

How long we keep information

We keep account information for as long as your account is active and for a reasonable period afterward. Raw analytics events (page views and link clicks) are aggregated into summary statistics and then deleted after 365 days; conversion records are kept longer for attribution. Redaction audit metadata is kept for your workspace's records until you delete it or close the account. Marketing contact records are kept until you unsubscribe or ask us to remove them.

Your choices and rights

You can access, correct, or delete your account information from the Service, or by contacting us at [privacy contact email]. Deleting your account removes your personal data from active systems through our account-deletion process; some records may persist in backups for a limited time and in aggregate, non-identifying statistics. You can unsubscribe from marketing email using the link in any such message, and you can decline non-essential analytics as described in the Cookie and Tracking Notice. Depending on where you live, you may have additional rights to access, correct, delete, or obtain a copy of your personal information; contact us to exercise them and we will respond as required by applicable law.

Security

Redaction happens on your device, so your document content is not exposed to us in transit or at rest. For the account and metadata we do hold, we use access controls, row-level security, and a strict Content Security Policy on the Service. No system is perfectly secure, but our architecture is designed to minimize what we hold in the first place.

Children

The Service is for business use and is not directed to children under 18. We do not knowingly collect personal information from children.

Where we operate

Threshmark is based in the United States and processes information in the United States.

Changes to this policy

We may update this policy. We will post the new version here with a revised effective date and, for material changes, provide a more prominent notice.

Contact

Threshmark, LLC [physical postal address] [privacy contact email]