Privacy Policy
Last updated: November 3, 2026
This policy explains how Red Thread Investigations ("Red Thread", "we", "us") handles information when you use our websites and applications, including the admin, investigation, field, and firm portals at redthreadinvestigations.com and its subdomains (together, the "Services"). Red Thread provides case management software to investigation firms ("Firms") and to the companies those Firms work for ("Clients").
Our role
For case data that a Firm or Client puts into the Services, the Firm is responsible for deciding what is collected and why, and Red Thread acts as its service provider, processing that information on the Firm's behalf and under its instructions. For account and security information about the people who log in, Red Thread is responsible for that information itself.
Information we collect
- Account information: your name, email address, role, the Firm or Client you belong to, and credentials (passwords are stored only in hashed form).
- Sign-in information from Google and Microsoft: if you choose to sign in with Google or Microsoft, we receive your name, email address, and profile identifier from that provider. We do not request access to your email, contacts, files, calendar, or any other data in your Google or Microsoft account.
- Case content: documents, images, notes, messages, reports, and other material that Firms, investigators, and Clients upload or create in the Services, along with associated metadata.
- Usage and device information: IP address, browser and device type, timestamps, and activity records (audit logs) that show who accessed or changed what.
How we use information
- To provide, operate, and secure the Services, and to authenticate you.
- To match your sign-in to the right Firm or Client, including by the email domain a Firm or Client has registered for single sign-on.
- To keep audit trails, prevent fraud and abuse, and troubleshoot problems.
- To send you account and service messages, such as invitations, password resets, and notifications.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell personal information, and we do not use it for advertising.
Google user data
Red Thread's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google sign-in data only to authenticate you and provide the Services. We do not transfer it to others except as needed to operate the Services or comply with law, we do not use it for advertising, and no person reads it except as needed for security, to comply with law, or with your consent.
How we share information
- Within your Firm or Client: case content and account details are visible to other authorized users of the same Firm or case, according to the access that Firm has configured. Firms cannot see one another's data.
- Service providers: we use providers for hosting, storage, email delivery, and authentication (for example, Amazon Web Services, Netlify, Google, and Microsoft). They process information only to provide their services to us.
- Legal and safety: we may disclose information when required by law, subpoena, or court order, or when needed to protect people, the Services, or our rights.
- Business transfers: if Red Thread is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
Retention
We keep case content for as long as the Firm maintains its account and as the Firm instructs, and for a reasonable period afterward to meet legal, accounting, and backup obligations. Account and audit-log information is kept as long as needed to operate and secure the Services and to meet legal obligations. When information is no longer needed, we delete or de-identify it.
Security
We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security.
Your choices and rights
Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you. Because most case information is controlled by the Firm you work with, we may refer requests about case content to that Firm. To make a request, contact us using the details below. You can also revoke Red Thread's access to your Google account sign-in at any time from your Google Account permissions page.
Cookies and local storage
We use cookies and browser local storage only as needed to keep you signed in and remember basic preferences. We do not use advertising or cross-site tracking cookies.
Children
The Services are for business use by adults and are not directed to children under 13. We do not knowingly collect information from children.
Changes
We may update this policy from time to time. The "Last updated" date above shows when it last changed. If we make material changes, we will provide additional notice where appropriate.
Contact
Questions or requests: support@redthreadinvestigations.com.