Privacy Policy.

§1. What We Collect

When you sign in with email and connect a Meta Threads account, we store the following: your name and email address; your Threads username, user identifier, and an encrypted access token used to publish posts and read analytics on your behalf; the posts you draft, schedule, or publish through Threadly; and your billing information via Stripe — we never see your card details directly.

§1.1 What We Do Not Collect

We do not sell your data, and we do not use your posts to train any artificial-intelligence models. We do not read your Threads direct messages unless you explicitly enable that integration.

§2. How We Use It

Your Threads access token is used solely to perform actions you trigger inside Threadly: scheduling posts, pulling analytics, and running engagement on your behalf. Your email is used for product updates and weekly digest reports — both of which you may opt out of at any time from Settings.

§3. AI Processing & Third Parties

To operate the service we share the minimum required data with the following processors: Cloudflare (hosting, analytics), Stripe (payments), Meta (Threads API), OpenRouter (AI inference for content generation), Resend (transactional email), Sentry (error monitoring), and Upstash (background job queue). Each receives only what is necessary to perform its function. None of them are permitted to retrain models on your content.

§4. Cookies & Tracking

We use first-party cookies for authentication and session state, and privacy-preserving aggregate analytics via Cloudflare. We do not use third-party advertising trackers or cross-site cookies. If your browser sends a Global Privacy Control signal, we honour it.Placeholder · to be refined

§5. Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Where applicable under the Malaysian Personal Data Protection Act 2010 — or the laws of your own jurisdiction — you may also withdraw consent, restrict processing, and lodge a complaint with the relevant supervisory authority. Requests are honoured within thirty days.

§6. Data Retention & Deletion

You may delete your account at any time. When you do, we purge all Threads access tokens immediately and queue your posts, analytics, and account data for deletion within thirty days. Meta may retain copies of any post that was published to Threads — those are subject to Meta's own retention rules, not ours.

§7. Contact

Questions, complaints, or data-subject requests should be addressed to hello@threadly.my. We aim to acknowledge within two business days and resolve within thirty.