You'd be trusting ThreadQuarters with your entire stock record. Here's how it's protected. If you spot something wrong, tell me at info@threadquarters.net.
The short version
- Your marketplace password is never requested, transmitted or stored. There's no field for it.
- ThreadQuarters never posts, edits or deletes anything on a marketplace on your behalf.
- Your data is yours. Export it or delete it whenever you want.
Where your data lives
The service runs on Amazon Web Services in eu-west-2 (London). Databases and file storage are encrypted at rest, and everything travels over HTTPS in transit.
Access
Every request is scoped to your account. Tenants cannot see one another's stock, listings, photographs or sales.
Currently I am the only person with administrative access, used only for support and fault-finding, and access is logged.
Backups
Backups run daily and are retained for 14 days, encrypted, in the same region. Restores have been performed and verified.
Photographs and AI
Photographs you upload are stored in your account and shown only to you. When you ask for a listing draft, the relevant photographs and text are sent to OpenAI to generate it. That content is not used to train models. Details are in the privacy notice.
Who else touches your data
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting, database, file storage |
| OpenAI | Generating listing drafts |
| Amazon SES | Service and support email |
Users are told before a new provider handling their data is added.
Deleting your data
Delete your account from settings and your data is removed from live systems within 30 days, and from backups within 14 days as backups age out. Records I'm legally required to keep for tax are retained separately.
If something goes wrong
If a breach affects your data I'll tell you what happened, what was affected and what I'm doing about it. Where the law requires it, the ICO is notified within 72 hours.
Reporting a vulnerability
Email info@threadquarters.net with the details. I'll acknowledge within 3 working days. Please don't access other people's data or degrade the service while testing, and give me a reasonable window to fix it before going public. Reports made in good faith are welcome, not treated as hostile.