Legal
Privacy Policy
Last updated: March 2026
1. Who we are
Thready ("we", "us", "our") is an AI-powered content repurposing tool built exclusively for the Threads social network. We help creators turn their existing blog content into Threads post drafts. This Privacy Policy explains how we collect, use, and protect information when you use our service at thready.social.
2. Information we collect
Account information
When you register, we collect your name, email address, and a hashed password. This is used solely to authenticate you and manage your account.
Content sources
You provide us with URLs to your blog or other content. We crawl and index that content to generate post ideas. We do not store the full content permanently — we store extracted ideas and metadata.
Threads account data
When you connect your Threads account via OAuth, we receive an access token, your Threads user ID, username, and profile information. We use this only to publish posts and retrieve analytics on your behalf. We never post without your explicit approval.
Usage data
We collect basic usage information (pages visited, features used, errors encountered) to improve the product. This data is aggregated and not linked to personal identity.
3. How we use your information
- To provide the core service: generating post ideas from your content and scheduling them to Threads.
- To authenticate you and protect your account.
- To send transactional emails (account confirmation, password reset). We do not send marketing emails without your consent.
- To improve the product using aggregated, anonymised usage analytics.
- To comply with legal obligations.
4. Threads / Meta data
Thready connects to the Threads API (provided by Meta Platforms, Inc.) to publish posts and retrieve analytics. When you connect your Threads account:
- We request only the permissions necessary to publish content and read analytics.
- We store your Threads access token securely and use it only on your behalf.
- We do not share your Threads data with third parties.
- You can disconnect your Threads account at any time in Settings. This immediately revokes our access.
- Meta's own Privacy Policy governs how Meta handles your data on the Threads platform.
5. Data sharing
We do not sell your personal data. We share data only in limited cases:
- With infrastructure providers (hosting, database) necessary to operate the service, under data processing agreements.
- With AI providers to generate post ideas — only the extracted content excerpts are sent, never your personal details.
- If required by law or to protect our legal rights.
6. Data retention
We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law. Generated post drafts and analytics are deleted immediately on account deletion.
7. Your rights
Depending on your location, you may have rights to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data (see our Data Deletion page).
- Export your data in a portable format.
- Object to or restrict certain processing.
To exercise any of these rights, email us at privacy@thready.social.
8. Security
We use industry-standard security practices: HTTPS for all data in transit, hashed passwords, encrypted database storage, and strict access controls. However, no system is 100% secure. Please use a strong, unique password for your account.
9. Cookies
We use only essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies.
10. Changes to this policy
We may update this Privacy Policy. We will notify you of significant changes by email or via an in-app notice. Continued use of the service after changes constitutes acceptance.
11. Contact
Questions about this policy? Email privacy@thready.social.