Last updated · 3 July 2026
The controller of your personal data is Antler Compass L.L.C (United Arab Emirates), which builds and operates Common Thread. For any privacy question or to exercise your rights, email us at team@common-thread.xyz. If you would like a postal address for formal notices, please ask and we will provide our registered details.
When you book a demo, request beta access, subscribe to our journal, or otherwise contact us, we collect the details you submit. Depending on the form, that includes your name, email address, company, job title, team size, how you heard about us, and whether you have consented to receive marketing. We also record which page you submitted from and the date of your consent.
If you use the Common Thread platform, you can connect third-party services such as Xero and QuickBooks, along with pipeline and project data. Through those connections we process the financial and operational data needed to produce your reporting, KPIs, cash-flow forecasts and benchmarking. This data is largely business data about your agency; where it contains personal data (for example, staff names or client contacts), you remain responsible for having the right to share it with us, and we process it on your instructions.
When you visit our website we collect limited technical and usage information — such as pages viewed, approximate location (country/region), device and browser type, and referring source — to keep the site secure and understand how it is used. Details of the tools we use are in section 4.
We use personal data to:
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we rely primarily on your consent, and on the necessity of taking steps at your request or performing a contract with you. Where you are protected by the UK or EU GDPR, we rely on your consent (for marketing and non-essential analytics), on legitimate interests (to secure our site, respond to business enquiries and improve our product, balanced against your rights), and on the performance of a contract. You can withdraw consent at any time.
We keep tracking to a minimum and do not sell your data or run advertising networks. The tools we use are:
Where required, we ask for your consent to non-essential analytics, and you can control cookies through your browser settings. Blocking some cookies may affect how the site works.
We only send marketing emails and our journal where you have consented, or where you have enquired about the product and we are following up. Every marketing message includes an easy way to unsubscribe, and you can opt out at any time by using that link or emailing team@common-thread.xyz. We manage these communications through Kit (see section 6).
We do not sell your personal data. We share it with a small set of service providers who process it on our behalf, under contract and only as needed to run Common Thread:
| Provider | What it does | More information |
|---|---|---|
| Vercel | Website and platform hosting, plus cookieless web analytics. | Privacy notice |
| MongoDB Atlas | The managed database that stores account and platform data. | Privacy hub |
| PostHog | Product and website analytics (EU-hosted). | Privacy |
| Kit (formerly ConvertKit) | Email marketing and journal delivery. | Privacy |
| Resend | Sends our transactional and system emails. | Privacy |
| Cloudflare | Turnstile bot protection for our forms. | Turnstile privacy |
On the platform, we also connect to Xero and QuickBooks at your direction. Those are independent services governed by their own privacy terms, and the data in your accounting system remains under your control. We may also disclose data where required by law or to protect our rights.
We are based in the United Arab Emirates and several of our providers are located outside the UAE (for example in the EU, UK and US). This means your personal data may be transferred to, and processed in, countries other than your own. The UAE is not currently on the UK or EU "adequacy" lists, and no UAE adequacy list is yet in force, so where we transfer personal data across borders we rely on appropriate safeguards — your consent, the necessity of performing our contract with you, and contractual protections with our providers (such as standard contractual clauses, the UK International Data Transfer Addendum, or equivalent terms) requiring a comparable level of protection, in accordance with the PDPL and, where applicable, the UK/EU GDPR. A copy of the relevant safeguards is available on request at team@common-thread.xyz.
We keep personal data only for as long as we need it for the purposes above. Enquiry and marketing data is kept while you remain a prospect or subscriber and for a reasonable period afterwards; if you unsubscribe or ask us to delete it, we will, subject to any records we must keep by law. Platform data is retained for the life of your account and deleted or returned after termination as described in our Terms, except for aggregated and de-identified data that no longer identifies you.
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and vetted service providers. No system is perfectly secure, but we work to protect your data and will notify the relevant authority and affected individuals of a data breach where the law requires, without undue delay and in accordance with the PDPL and its implementing regulations.
Under the UAE PDPL — and, where it applies to you, the UK/EU GDPR — you have the right to:
To exercise any of these, email team@common-thread.xyz. We will respond within one month (which may be extended for complex requests). You also have the right to complain to the UAE Data Office; if you are in the UK or EU, you may instead complain to your local supervisory authority (in the UK, the Information Commissioner's Office).
Common Thread is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 18.
We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, let you know. Please check back periodically.
Questions about this policy or your data? Email team@common-thread.xyz and we will be glad to help.