Privacy Policy
Tread Connection is a product of Rising Creek Construction LLC, a Texas company ("we", "us"). This policy covers treadconnection.ai, the Tread Connection MCP connector used from AI assistants. Our community site runs on Circle and is also covered by Circle's privacy policy.
What we collect
- Account details. Your name and email address, your membership tier, and the Circle member record that created your account.
- Sign-in data. Your Tread Connection API key (stored as a SHA-256 hash, not in plain text — we can show it to you once, when it's created, and never again after that), one-time sign-in codes we email you (also stored hashed, expire after 10 minutes), a browser sign-in session token (stored hashed), OAuth access and refresh tokens issued to the AI assistant you connect, and a hashed device identifier for each device that connects.
- Your JobTread connection. If you connect JobTread, we store the JobTread grant key you give us and your JobTread organization ID. We use that key to run the tools you or your assistant call, and to look up your JobTread team when you use the team pages.
- JobTread data you ask us to read. When a tool runs, we read from JobTread what that tool needs, such as jobs, tasks, daily logs, invoices, bills, cost items and settings. Most of this is passed straight back to your assistant and not kept. When you use the team pages, we read your JobTread team list (names, email addresses and roles) to send invitations.
- Backups and audits. Configuration backups of your JobTread organization and audit results are stored so you can view, compare and restore them. Job budget snapshots you ask for are stored too (the newest 25 per job are kept).
- Usage logs. For each request: time, IP address, device identifier, your tier, which knowledge topics were served, and whether the request succeeded. We use these for security, abuse prevention and fixing problems. For each connected device we also keep its network prefix and browser type. We use these for security, abuse prevention and fixing problems.
- Searches and requests. Marketplace searches and custom-agent requests you make through the tools, so our team can answer requests and see which topics members need. Only Tread Connection staff can see them.
- Messages you send. What you type on a Client Room session page, and anything you send to our support address.
Client Rooms
Client Rooms hold a client's own project conversation, and we handle them differently from the rest of the data on this page.
- What's captured. A Client Room is a private space in our Circle community that the platform owner sets up for one client and the partner(s) working with them. Nothing is pulled from it automatically. When the platform owner captures a Client Room, we read that room's own posts, their comments, any live-call transcripts matched to it, and membership changes, and write them into an append-only log.
- When. A Client Room is never captured on a timer or in the background — only when the platform owner explicitly asks for it (an end-of-session sync or an explicit capture request), and even resolving which room to read is a read-only lookup that pulls nothing else in on its own.
- Who can read it. A Client Room's captured log can be read only by the platform owner (the Rising Creek Construction account that operates Tread Connection), through the platform owner's own connected AI assistant, so that assistant's provider also processes what is read back — not by org admins, not by other members, and not by the client or partners in the room, even though the room's content is theirs. Partners and clients only ever see what's deliberately shared with them, in the room itself or elsewhere.
- People who aren't Tread Connection members. A Client Room's client and any partners in it are often guests in that Circle space, not Tread Connection members. What they post there is captured the same as anyone else's post in that room — because it's part of the room's own record, not because they have an account with us.
- Retention and deletion. A Client Room's captured log is append-only by design: once an entry is written, it is never edited or removed, even if the original post, comment or transcript is later deleted in Circle (a Circle-side deletion adds a "removed" marker to the log — it does not erase what was already captured). We can stop capturing a room or remove someone's access to it, but we do not delete an individual captured log entry, including on request; the database itself rejects edits and deletions of captured entries.
PaceNotes
PaceNotes is a separate product inside Tread Connection that listens to conversations you choose, shows short cues and writes notes. It has its own privacy policy at /pacenotes/privacy, which controls for PaceNotes data. In short, PaceNotes sends audio to OpenAI for transcription, sends transcript text to Anthropic to write cues and write-ups, uses ElevenLabs for spoken cues, uses Twilio for calls, and uses Stripe to take payment when you buy extra minutes (we keep only your Stripe customer id and the brand and last four digits of your card). We do not store audio. Transcripts are kept for 90 days by default, and you can change that or delete them at any time. Unless a member turns it off in PaceNotes settings, Rising Creek Construction reads and grades the text of PaceNotes calls and meetings to improve PaceNotes. In the PaceNotes Chrome extension it is off until the member turns it on. That text is never published, sold, used in marketing or shown to other members, and the PaceNotes privacy policy gives the details and the date it starts. Tread Connection stays your account and billing provider.
How we use it
To run the service you asked for, keep your account secure, send you sign-in codes and account notices, answer support requests, and improve Tread Connection. We do not sell your personal information or your JobTread data, and we do not use your JobTread data to advertise to you.
Anonymous, aggregated statistics (for example, how many members use a given JobTread feature) may be used to improve our guidance and benchmarks. These never name you, your company, your customers or your jobs.
Who we share it with
- JobTread, when a tool you call reads or writes your JobTread account.
- Your AI assistant provider (for example Anthropic or OpenAI). Tool results go to the assistant you connected, and that provider's own privacy policy governs what it does with them.
- Service providers that run parts of Tread Connection for us: DigitalOcean (hosting, and off-site backups of our databases on DigitalOcean Spaces), Circle (community and membership payments), Resend or our mail provider (email delivery), and Anthropic (the model behind the Client Room session page). They may use the data only to provide their service to us.
- Circle, for community sign-in. If community single sign-on is enabled, Circle receives your email, name and a stable account ID from us, and nothing else: no password, no JobTread data, no MCP tool access.
- Legal reasons. If the law requires it, or to protect our members, our service or the public.
- A business transfer. If Tread Connection is sold or merged, this data would move with it under the same protections.
Cookies and advertising
Our public pages (the home page, pricing, and a few showcase pages) use the Meta Pixel. It sets cookies and tells Meta which of those pages you visited and whether you played a video or clicked a sign-up link. We use that to measure our marketing and to show Tread Connection ads on Facebook and Instagram to people who have visited. The pixel is not on sign-in, connection, audit or member pages, and it never receives your JobTread data. You can turn off ads based on this activity in your Facebook or Instagram ad preferences, or block cookies in your browser.
How long we keep it
- JobTread data read during a tool call: not kept after the response, except backups, audits and job budget snapshots.
- Backups: by retention tier, from 24 hours up to one year for annual snapshots. You can ask us to delete them at any time.
- Sign-in codes: 10 minutes. OAuth access tokens: up to 30 days (a Circle community sign-in token: 10 minutes, and isn't renewed). Refresh tokens: up to one year, or until you disconnect.
- Account data, JobTread grant key, audit history and usage logs: while your account is active. After you cancel or ask us to delete your account, we remove them within 30 days, apart from records we must keep for legal or accounting reasons.
- Our own database backups (a nightly archive of our databases, kept on DigitalOcean Spaces so we can recover from a failure): 30 days, then automatically deleted.
- PaceNotes transcripts: 90 days by default, or the time the member picks. A PaceNotes test case kept longer than 90 days has names, addresses, phone numbers, email addresses and prices replaced. See /pacenotes/privacy.
- A Client Room's captured log (see "Client Rooms" above): kept permanently by design. It is append-only and we do not delete an individual entry from it, even on request.
Security
Data is stored on access-restricted servers and sent over HTTPS. Only the people who operate Tread Connection can reach production data. No system is perfectly secure. If we learn of a breach that affects your data, we will tell you without undue delay.
Your choices
You can disconnect an AI assistant from its connector settings at any time. You can also ask us to remove your JobTread connection, delete backups, send you a copy of your data, correct it, or delete your account. Email jakemauldin@risingcreek.ai. We answer within 30 days.
Children
Tread Connection is a business tool for construction companies. It is not meant for anyone under 18, and we do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will update the date above and tell active members by email or in the community before the change takes effect.
Contact
Rising Creek Construction LLC, Springtown, Texas. jakemauldin@risingcreek.ai