Privacy: what leaves your device

ThreadVault converts your chats on your computer or in your browser. Messages, contacts, media and encryption keys are never uploaded.

What the server stores

• Your account: email, name, sign-in method, sessions (IP address, browser, approximate location), notification settings.
• Devices: platform, a random installation id, optional name, app version, last check-in.
• Sources: a one-way hash of the WhatsApp number or phone serial, and an optional label you typed.
• Exports: counters only — kind, format, how many chats and messages, bytes, duration, the oldest message date used for history limits. Never the content.
• Billing: Stripe customer and subscription ids and the subscription status.

Your data, your controls

Account → Privacy & data lets you:

• Download a copy of everything above as a ZIP. It is built within a few minutes and emailed as a link that expires after a few days.
• Delete your account. Deletion is scheduled after a grace period shown on the page; you can cancel until then by signing in. At the deadline the subscription is cancelled, your data is removed and the audit trail keeps only an anonymised record.

If a request of the same kind is already in progress you will see DATA_REQUEST_PENDING; an expired download link answers DOWNLOAD_EXPIRED — simply request a new copy.