Privacy Policy

Neothread Research Inc. is based in Toronto, ON, Canada. For the information described here, we are the controller — we decide what is collected and why. You can reach us at any time at hello@neothread.ai.

When you fill in a form. The contact form asks for your first name, last name, work email address and your message. The Get Started form asks for your email address, the CRM you use, your deal volume and what you want out of the engagement. We only get what you type.

When you book a call. Your name, email address and the time you chose, handled through our scheduling provider, plus anything you add in the booking notes.

When you email us. Your address and whatever the message contains, kept with our business correspondence.

Automatically, when you browse. Your IP address, approximate location derived from it (city level, not precise), browser and device type, the pages you viewed, how you arrived, and timestamps. This comes from Google Analytics — see below.

Before you ever contact us. We may already hold your name, job title, employer and professional contact details, obtained from business-contact data providers or from publicly available professional profiles, and used to reach out about our services.

We do not ask for payment card details, government identifiers, or login credentials anywhere on this website.

Two other technologies are strictly functional. Cloudflare serves this site and runs a Turnstile check on our forms to tell humans from bots; it sets what it needs to do that. Google Fonts delivers the typefaces the site is set in, which means your IP address is visible to Google when a page loads. Neither is used to track you across other websites.

We do not run advertising or retargeting pixels on this site, and we do not use session-recording or visitor de-anonymization tools.

• To answer your enquiry and set up a conversation
• To provide and improve our services, and to configure an engagement correctly
• To send you information about our services, where we have a lawful basis to do so
• To understand how this website is used, and to make it better
• To keep our forms and infrastructure secure and free of automated abuse
• To keep business, tax and accounting records
• To comply with the law and enforce our terms

Where a lawful basis is required, we rely on your consent (for example, when you submit a form), our legitimate interest in operating and marketing a business-to-business service, the performance of a contract, and our legal obligations. Where we rely on consent, you can withdraw it at any time.

We use service providers who process information on our behalf, under contract. We do not give them permission to use it for their own purposes:

We may also disclose information where the law requires it, to enforce our terms, or to a buyer or successor if the business is ever sold or reorganised — in which case this policy continues to apply to information already collected.

We keep information for as long as it serves the purpose it was collected for, then delete it. In practice:

Form submissions and correspondence

Up to 24 monthsfrom our last contact, unless you become a customer

Customer and accounting records

7 yearsfor accounting and audit

Google Analytics data

Per Google's settingsaggregate reporting is retained longer

Details of people who asked not to be contacted again

Indefinitelysolely to honour that request

We are based in Canada, and our service providers operate in Canada, the United States and the European Union. That means your information may be transferred to, stored in, and accessed from a country other than your own, where the privacy laws differ from those where you live. Where the law requires a transfer safeguard, we rely on our providers’ standard contractual clauses and equivalent contractual protections.

• Ask for a copy of the personal information we hold about you
• Ask us to correct or delete it
• Object to, or withdraw consent for, a particular use
• Unsubscribe from our emails, using the link in any message or by replying and saying so
• Ask us not to contact you again. We keep the minimum needed to honour that
• Turn off analytics by blocking cookies in your browser settings, using a tracker-blocking extension, or installing Google’s own Analytics opt-out browser add-on

Email hello@neothread.ai and we will respond within 30 days. We may need to confirm who you are before acting on a request.

Canada. You may ask for access to the personal information we hold about you and challenge its accuracy or completeness under PIPEDA. If we cannot resolve a complaint to your satisfaction, you can escalate it to the Office of the Privacy Commissioner of Canada.

California. You have the right to know what personal information we collect, use and disclose; to request deletion; to request correction; to opt out of sale or sharing; and not to be discriminated against for exercising these rights. We do not sell personal information. Exercise any of these rights at the email above.

United Kingdom and European Economic Area. Where the UK GDPR or EU GDPR applies to you, you additionally have the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.

Our site is served over HTTPS, form submissions are verified server-side before they are forwarded, and secrets such as webhook URLs and API keys are held in server-side environment variables rather than in anything sent to your browser. Access to business records is limited to people who need it. No system is perfectly secure, and we do not claim otherwise — but we do not collect payment or identity documents here, which keeps the consequences of any failure narrow.

This is a business-to-business service. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email hello@neothread.ai and we will delete it.

We will update this policy as our practices change and revise the date above. If a change materially affects how we use information we already hold, we will say so more prominently — by email where we hold an address for you.