This version is no longer in force. It is kept here because it is the text some subscribers accepted. The version currently in force is the current Privacy Policy.

Privacy Policy#

Treadstone Collective

Effective date: August 24, 2026 Last updated: August 24, 2026

1. Overview#

This Privacy Policy explains how TREADSTONE COLLECTIVE LLC, a Florida limited liability company ("Treadstone," "we," "us"), collects, uses, shares, and protects personal information.

It covers two distinct things, and the difference matters:

Information about you — our subscribers, waitlist members, and website visitors. Sections 2 through 6.
Information about people who appear in our intelligence content — public figures, officials, and named individuals who show up in the open-source material we process. Section 7.

If you have questions, contact us at privacy@treadstonecollective.com.

2. Information We Collect About You#

2.1 Information you give us#

Category	Examples
Account	Name, email address, password (stored hashed), account tier
Billing	Billing name, billing address, country, last four digits and expiry of your card, transaction history. We never see or store your full card number — Stripe handles that directly.
Preferences	Briefing topics, regions, saved entities, alert settings, feed configuration
Communications	Support messages, bug reports, survey responses, correspondence with us
Waitlist	Email address and any details you provide when joining the waitlist

2.2 Information collected automatically#

Usage data: pages and briefs viewed, searches run, features used, timestamps, session duration
Device and technical data: IP address, browser type and version, operating system, device type, screen size, language, referring URL
Approximate location: derived from IP address at city or region level. We do not collect precise GPS location.
Cookies and similar technologies: see Section 9

2.3 Information from third parties#

Stripe — subscription status, payment outcomes, fraud signals
Authentication providers — if you sign in through a third-party identity provider, the basic profile information they share

2.4 What we do not collect#

We do not intentionally collect sensitive personal information about you — such as government ID numbers, precise geolocation, biometric data, health information, or information revealing racial or ethnic origin, religious beliefs, political opinions, trade union membership, or sexual orientation. Please do not send us this information.

3. How We Use Your Information#

Purpose	What this means
Providing the Service	Authenticating you, delivering briefs and feeds, personalizing content to your stated preferences, maintaining your history
Billing	Processing subscriptions, renewals, refunds, and invoices; preventing payment fraud
Support	Responding to your messages, investigating bug reports, resolving issues
Improving the Service	Understanding which features are used, diagnosing errors, measuring performance, prioritizing development
Communications	Sending service messages (renewal notices, security alerts, policy changes) and, with your consent where required, marketing emails
Marketing	Sending marketing email to people who have opted in or are existing customers; understanding which of our own pages and emails perform well, using our own server logs
Security and abuse prevention	Detecting credential sharing, scraping, unauthorized access, and violations of our Terms
Legal compliance	Meeting tax, accounting, sanctions screening, and other legal obligations; responding to lawful requests

We do not sell or share your personal information. See Section 8.

We do not use your personal information to train third-party AI models. Your account data, queries, and content are not used as training data by our AI providers under our API agreements with them.

4. Legal Bases for Processing (EEA, UK, and Switzerland)#

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on these bases:

Basis	Applies to
Contract	Providing the Service, billing, support — necessary to perform our agreement with you
Legitimate interests	Improving the Service, security and fraud prevention, business analytics, direct marketing to existing customers — balanced against your rights
Consent	Non-essential cookies, advertising tracking, marketing emails where consent is required. You may withdraw consent at any time.
Legal obligation	Tax records, sanctions compliance, responses to lawful authority

For the separate question of information about individuals appearing in our intelligence content, see Section 7.

We share personal information with the following categories of recipients. We do not sell it to data brokers.

5.1 Service providers (sub-processors)#

Provider	Purpose	Location
Vercel Inc.	Application hosting and delivery	United States
Supabase Inc. / Amazon Web Services	Database and authentication	United States (us-west-2)
Stripe, Inc.	Payment processing and subscription billing	United States
Resend	Transactional and brief email delivery	United States
Anthropic PBC	AI model processing (content generation)	United States
OpenAI, L.P.	Embeddings and semantic search	United States
n8n GmbH	Workflow automation	European Union
Notion Labs, Inc.	Bug report and support ticket handling	United States
Mapbox, Inc.	Map rendering	United States

We require service providers to protect personal information and to use it only for the purposes we specify. We maintain a current list at /subprocessors and will update it as providers change.

Legal and safety: when required by law, subpoena, or court order, or where we believe disclosure is necessary to protect rights, safety, or property, or to investigate fraud or violations of our Terms
Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy
With your direction: when you ask us to share information with a third party

6. Retention#

Data	Retention period
Account and profile data	Duration of your account, then 12 months after closure
Billing and transaction records	7 years (tax and accounting requirements)
Usage and analytics logs	24 months, then deleted or aggregated
Support and bug reports	24 months after resolution
Waitlist emails	Until you unsubscribe or 24 months of inactivity
Marketing preferences and opt-outs	Retained indefinitely so we can honor your choices

We may retain information longer where required by law or to establish, exercise, or defend legal claims.

7. Information About Individuals Appearing in Intelligence Content#

This section is about people who are named or described in the material we process, not about our subscribers.

7.1 What we process. Treadstone monitors publicly available sources — news reporting, government publications, public social media accounts, public messaging channels, and academic and research datasets. That material frequently names individuals, most often public figures: heads of state, government officials, military and security leadership, diplomats, executives, and others whose conduct is the subject of public reporting. We extract, structure, and store references to these individuals in an entity database, and we generate summaries and assessments that mention them.

7.2 Purpose. We process this information for journalistic, research, and analytical purposes — reporting on and analyzing public affairs, armed conflict, security, and geopolitical developments.

7.3 Legal basis. Where the GDPR or UK GDPR applies, we rely on legitimate interests under Article 6(1)(f) — our interest and our subscribers' interest in analysis of matters of public concern, balanced against the rights of the individuals concerned. We also rely, where applicable, on the exemptions for processing carried out for journalistic purposes and for academic, artistic, or literary expression under Article 85 and the national laws implementing it. Where a source contains special category data under Article 9, we rely on Article 9(2)(e) (data manifestly made public by the data subject) or Article 9(2)(g) where applicable.

7.4 Sources. We do not collect information covertly, by deception, from private communications, from stolen or leaked datasets, or by any means requiring circumvention of access controls. We process material that is publicly available.

7.5 Accuracy. Our content is generated by automated systems from third-party sources and may contain errors, including errors about named individuals. We take accuracy seriously and will act on credible correction requests.

7.6 Your rights if you appear in our content. If you are named in our intelligence content, you may contact us at privacy@treadstonecollective.com to request access to what we hold about you, correction of inaccuracies, deletion, or to object to our processing. We will assess each request against the exemptions above and applicable law, and will respond within the time required by law. We will not disclose subscriber identities or our sourcing in responding to such a request.

8. Advertising, Analytics, and Your Opt-Out Rights#

8.1 We do not currently use advertising or analytics trackers. As of the effective date of this Policy, we do not run advertising pixels, third-party analytics services, or cross-site tracking technologies on our website or in the Service. We do not disclose personal information to advertising platforms.

8.2 We do not sell or share your personal information. We do not sell personal information for money, and we do not share it for cross-context behavioral advertising, as those terms are defined by the California Consumer Privacy Act and comparable laws in Colorado, Connecticut, Virginia, Texas, and other states.

8.3 If this changes. If we begin using advertising or analytics technologies that involve selling or sharing personal information, we will update this Policy and notify you before the change takes effect, as described in Section 14. We already maintain a "Do Not Sell or Share My Personal Information" control in our website footer, and we honor Global Privacy Control (GPC) browser signals as valid opt-out requests. Your preference will be recorded and respected from the moment any such change takes effect — you do not need to wait and act later.

8.4 Marketing email. Every marketing email includes an unsubscribe link. Unsubscribing does not stop transactional messages such as renewal notices, receipts, or security alerts.

9. Cookies and Similar Technologies#

We use:

Strictly necessary cookies — authentication, session management, security. These cannot be disabled.
Functional cookies — remembering your preferences and settings.

We do not currently use analytics or advertising cookies. If we add them, they will be set only with your consent where consent is required, and you will be able to manage them by category through our cookie banner.

You can manage your choices through our cookie banner or your browser settings. Blocking necessary cookies will break core functionality.

10. Security#

We protect personal information with measures including encryption in transit (TLS) and at rest, hashed password storage, row-level security on our database, access controls limiting internal access to what is necessary, and audit logging.

No system is perfectly secure. We cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

Use a strong, unique password and notify us immediately at security@treadstonecollective.com if you suspect unauthorized access to your account.

11. International Data Transfers#

We are based in the United States, and our infrastructure is primarily located there. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries whose data protection laws may differ from those in your country.

Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where needed. You may request a copy of the relevant safeguards at privacy@treadstonecollective.com.

12. Your Rights#

12.1 All users#

You may access and update most account information directly in your account settings, cancel your subscription at any time, unsubscribe from marketing email, and contact us with any privacy request.

12.2 U.S. state privacy rights#

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you may have the right to:

Know what personal information we collect, use, disclose, and share
Access a copy of your personal information in a portable format
Correct inaccurate personal information
Delete your personal information, subject to legal exceptions
Opt out of sale, sharing, and targeted advertising — we do not currently engage in any of these (Section 8), but the control is available and we honor GPC signals
Limit use of sensitive personal information — we do not use sensitive personal information for purposes requiring this right
Non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercised these rights

Authorized agents may submit requests on your behalf with proof of authorization.

Appeals: if we deny your request, you may appeal by replying to our decision. We will respond within 45 days. If we deny your appeal, you may contact your state attorney general.

All U.S. residents. Not every state has a comprehensive privacy law, and some that do — including Florida — apply only to very large companies. Regardless of where you live in the United States, we will honor access, correction, deletion, and opt-out requests from any user through the process in Section 12.4.

12.3 EEA, UK, and Swiss rights#

You have the rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests — including objecting to direct marketing at any time. You may withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.

You have the right to lodge a complaint with your local supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL); in the UK, the Information Commissioner's Office (ICO).

12.4 How to exercise your rights#

Email privacy@treadstonecollective.com with your request and the email address on your account. We will verify your identity before acting, and we will respond within the time required by applicable law — generally 45 days in the United States and one month in the EEA and UK.

13. Children#

The Service is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at privacy@treadstonecollective.com and we will delete it.

14. Changes to This Policy#

We may update this Policy. If we make a material change, we will notify you by email or through the Service before it takes effect and update the "Last updated" date above. Prior versions are available on request.

15. Contact Us#

Treadstone Collective LLC 525 N. Fort Lauderdale Beach Blvd, Unit 902 Fort Lauderdale, FL 33304 United States

Privacy: privacy@treadstonecollective.com Security: security@treadstonecollective.com Corrections: corrections@treadstonecollective.com

EU / UK representative: [TO BE APPOINTED IF REQUIRED — see Article 27 GDPR]