Privacy Policy — ReThreads

https://rethreads.app

Last updated: 01/06/2026

This Privacy Policy explains how ReThreads processes data.

1. Data Controller

SIA Manon

Latvia

Website: https://rethreads.app

Email: info@rethreads.app

2. Data We Collect

2.1 Data stored locally (Chrome storage)

authentication token (JWT)
settings and preferences
custom prompts
filters
activity logs
generated comment history
session state
processed post IDs
usage statistics

This data remains on your device unless deleted.

2.2 Server-side data (Supabase)

We store:

profiles

internal user ID (UUID)
display name
auto-generated email identifier (non-functional)
Threads username
plan type (free/pro)
usage counters

subscriptions

tier (monthly / quarterly)
subscription status
billing period
LemonSqueezy IDs (order/subscription IDs)
amount and currency

daily_usage

comments generated per day

usage_log

actions performed
model used
token usage
cost estimation

extension_keys

authentication key
last activity timestamp

2.3 Authentication Data

Authentication is based on Threads username.

We do NOT use:

passwords
OAuth
magic links

A server-issued JWT is generated after verifying the Threads username via browser session.

3. Data from Threads

We do NOT access:

cookies
private messages
browsing history
hidden or non-public data

We only process:

publicly visible content on Threads pages opened by the user.

4. AI Processing

To generate comments, we send to OpenAI via backend proxy:

post text content
optional media description (alt text or placeholder)

We do NOT send:

usernames of post authors
links
profile data
engagement metrics

Custom prompts provided by users are also processed as part of the AI request.

OpenAI may retain API data for up to 30 days according to their policy.

5. Third-Party Services

We use:

Supabase (EU)

Backend and database hosting

https://supabase.com/privacy

OpenAI (US)

AI generation

https://openai.com/policies/privacy-policy

LemonSqueezy

Payment processing and billing

https://www.lemonsqueezy.com/privacy

6. What We Do NOT Do

We do NOT:

use analytics tools
track users across websites
collect browsing history
use advertising trackers
sell personal data
use crash reporting tools

7. Data Retention

Local data: until removed by user or extension uninstall
Server data: retained while account is active
Deleted accounts: removed within 14 days
Abuse logs: may be retained up to 90 days (anonymized where possible)

8. Data Deletion

Users may request deletion via:

info@rethreads.app

We may require verification via Threads username ownership.

9. Children’s Privacy

We do not knowingly collect data from users under 13.

If discovered, data will be deleted.

10. International Transfers

Data may be processed outside the EU (including the US via OpenAI).

11. Changes

We may update this policy at any time. Continued use constitutes acceptance.

12. Contact