Privacy Policy

1. Information We Collect

We collect information in the following ways:

• Account Information: Email address, name, and password when you create an account.
• Content: Posts, media files, drafts, and scheduling data you create within Threadify.
• Connected Accounts: OAuth tokens and profile information from social media platforms you connect (Instagram, X/Twitter, LinkedIn, TikTok, Threads, Bluesky, YouTube).
• Usage Data: Analytics about how you use Threadify, including features accessed and time spent.
• Payment Information: Billing details processed securely through our payment provider (we never store full card numbers).

2. How We Use Your Information

• To provide and maintain our service
• To schedule and publish your content to connected platforms
• To analyze engagement and provide analytics insights
• To send service-related notifications and updates
• To improve our platform and develop new features
• To process payments and manage subscriptions
• To provide customer support

3. Third-Party Integrations

Threadify integrates with seven social media platforms. When you connect an account, we access only the permissions necessary to post content and retrieve analytics on your behalf:

• Instagram/Threads: Via Meta Graph API with Business account permissions
• X/Twitter: OAuth 2.0 with posting and analytics permissions
• LinkedIn: OAuth 2.0 for personal profiles and company pages
• TikTok: Developer API with content posting permissions
• Bluesky: App Password authentication for AT Protocol
• YouTube: Google OAuth with video upload permissions

Each platform has its own privacy policy governing how they handle your data.

4. Data Storage & Security

Your data is stored securely using Convex, a modern backend platform with enterprise-grade security. We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (TLS) and at rest
• Secure OAuth token storage with encryption
• Regular security audits and monitoring
• Access controls and authentication requirements

5. OAuth Tokens & Platform Access

When you connect social media accounts, we store OAuth tokens securely to maintain your connections. These tokens allow us to act on your behalf (posting content, fetching analytics) without ever accessing your platform passwords. You can disconnect accounts at any time, which revokes our access and deletes stored tokens.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Published post history retention varies by plan (30 days for Free, 1 year for Solo, unlimited for Pro). When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to certain processing activities
• Withdraw consent where processing is based on consent

For GDPR (EU/EEA) and CCPA (California) requests, contact us at hello@threadify.bz.

8. Cookies

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how you use our service. You can control cookie preferences through your browser settings.

9. Policy Updates

We may update this privacy policy from time to time. We will notify you of significant changes via email or through a notice on our platform. Continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us at hello@threadify.bz.