Privacy Policy

Last updated: April 17, 2026

1. Who we are

ThreadsHub ("we", "our", "us") is a multi-account management dashboard for the Threads platform by Meta. We are an independent service and are not affiliated with Meta Platforms, Inc.

2. Data we collect

• Account credentials: your email address and a hashed (bcrypt) password to authenticate you on ThreadsHub.
• Threads access tokens: OAuth tokens issued by Meta, stored securely in our database to interact with the Threads API on your behalf.
• Content you create: posts, images, text presets, and routines you save inside the app.
• Usage data: basic server logs (IP address, timestamps) for security and debugging purposes.

3. How we use your data

• To publish, schedule, and manage Threads posts on your behalf.
• To display analytics and insights from the Threads API.
• To sync your content across devices.
• We do not sell, share, or rent your data to any third party.

4. Threads API & Meta permissions

ThreadsHub uses the Threads API. By connecting your Threads account you authorize us to act on your behalf using the following permissions: threads_basic, threads_content_publish, threads_manage_replies, threads_read_replies, threads_manage_insights, threads_delete. You can revoke this access at any time from your Threads settings.

5. Cookies & third-party services

ThreadsHub loads fonts from Google Fonts (fonts.googleapis.com). Google may collect limited technical data (IP address, browser type) as part of this service. No advertising or tracking cookies are used by ThreadsHub. For more information, see Google's Privacy Policy.

6. Legal basis for processing (GDPR)

If you are located in the European Economic Area, we process your personal data on the following legal bases:

• Contract performance: processing necessary to provide the ThreadsHub service you signed up for.
• Legitimate interest: server logs for security and abuse prevention.
• Consent: connecting your Threads account via OAuth.

7. Your rights (GDPR)

• Access: request a copy of all personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your account and all associated data.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

8. Data retention

Your data is retained as long as your account is active. Deleted accounts and their associated data are permanently removed within 30 days.

9. Security

Passwords are hashed using bcrypt and never stored in plain text. Access tokens are stored in a secured PostgreSQL database. All communications are encrypted via HTTPS. No data is transferred outside the European Union without adequate safeguards.

10. Contact

For any privacy-related questions or to exercise your rights: [email protected]