Privacy policy
What we can and can't do
We can read your Threads profile, posts, replies and insights. We can't post, reply or send messages, and we never ask for those permissions. You can disconnect and delete all your data in one click from your account page.
What we store and for how long
- Raw Threads data (profile, posts, replies, insights): kept for at most 30 days after each analysis, then deleted.
- Your reports: kept until you delete them. Quoted posts are copied into the report.
- Your access token: stored encrypted; deleted when you disconnect.
- Email address (optional): used only for report notifications.
- Logs: kept for at most 30 days. Encrypted backups roll over within 6 months.
Who processes data for us
- Hetzner (hosting in Germany, backups in Finland)
- OpenAI (writes your report from your data; outside the EU)
- Lemon Squeezy (payments, as Merchant of Record; keeps records required for tax)
- Resend (transactional email)
- Plausible (cookieless, EU-hosted website statistics; no personal data)
- Sentry (error tracking, EU region)
Deleting your data
Use “Disconnect & delete all data” on your account page, or remove ThreadsPilot in your Threads settings and request deletion. We confirm by email if we have your address.
Contact
privacy@threadspilot.com