Legal
Privacy Policy
Last updated 2026-08-20
This policy explains what Threadlane AI Labs & Research does with personal data collected through ai.threadlane.in. It is written to be read, not to be survived.
Who we are
Threadlane AI Labs & Research ("we", "us") is the data controller for personal data collected through this site. You can reach us at connect@threadlane.in. We are based in Bengaluru, India.
What we collect
| Data | When | Why |
|---|---|---|
| Name, work email, company | You submit a project brief | To reply to your enquiry |
| Project description, budget range, timeline | You submit a project brief | To assess and route the enquiry |
| Campaign source (UTM), referring page, user agent | You submit a project brief | To understand which campaigns work |
| Pages viewed, clicks, scroll depth, session duration | Always, cookieless | Product analytics |
| Advertising identifiers | Only if you accept marketing cookies | Ad measurement |
| Your cookie choice, with a random id, page, browser, language and time zone | Each time you accept, reject or withdraw | To prove we honoured your choice, as the law requires |
We do not collect special category data, we do not ask for payment details on this site, and we do not buy personal data from third parties.
What we never do
- We do not sell personal data, and we never have.
- We do not add you to a newsletter or an automated sequence because you sent an enquiry. A person replies to you; that is the whole flow.
- We do not train shared AI models on the contents of your enquiry or on any client data.
Legal bases (UK/EU GDPR)
- Legitimate interests — replying to an enquiry you sent us, and understanding aggregate site usage through cookieless analytics.
- Consent — advertising and measurement cookies, which are off until you accept them and which you can withdraw at any time.
- Contract — where we go on to work together, to perform that engagement.
- Legal obligation — tax, accounting and record-keeping requirements.
Processors we use
| Processor | Purpose | Data |
|---|---|---|
| Umami (self-hosted, page-analytics.threadlane.in) | Product analytics | Page views and interaction events. Cookieless, no cross-site tracking. |
| Google Ads (gtag.js) | Advertising measurement | Conversion signals. Loaded only with consent. |
| Our own infrastructure | Enquiry storage | Project briefs, stored in our database. |
| Our own infrastructure | Consent records | Your cookie decisions, kept as proof that we honoured them. |
Retention
- Project enquiries — kept while a conversation is live and for up to 24 months afterwards, so we recognise you if you return.
- Analytics events — aggregate, not tied to an identified person, retained indefinitely.
- Consent records — kept for as long as the consent could still be questioned, and for 24 months after it is withdrawn or replaced. Deleting these on request would destroy the only proof that we honoured your choice.
- Engagement records — kept for as long as tax and contractual obligations require.
Ask us to delete your enquiry sooner and we will, unless we are legally required to keep it.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your data, to withdraw consent, and to receive a copy in a portable format. Under India's DPDP Act 2023 you may also nominate someone to exercise these rights on your behalf.
Email connect@threadlane.in and we will respond within 30 days. There is no fee. If you are in the UK or EU and are unhappy with our response, you may complain to your national supervisory authority.
International transfers
We are based in India. If you contact us from the UK, EU or elsewhere, your data will be processed in India and by the processors listed above, which may operate in other jurisdictions. Where required we rely on Standard Contractual Clauses or an equivalent transfer mechanism.
Security
The site is served over HTTPS only, with HSTS. Enquiry data is stored in an access-controlled database. We keep the number of people who can read enquiries small.
Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 18.
Changes
If we change this policy materially we will update the date at the top and, where the change affects consent, ask you again through the cookie banner.