Privacy policy

Email sign-in

For web sign-in we process your email address, one-time code verification and browser session. Email is stored encrypted; codes are stored only as hashes and expire after 10 minutes. Sign-in request records are deleted after 24 hours. Cloudflare delivers sign-in messages. We do not ask for a password for your email, Telegram or Threads account.

Data we use

For Telegram sign-in, we receive your identifier and user information from signed Mini App data. When you connect Threads, we store the profile ID and username, permission expiry and encrypted access tokens. We do not ask for Telegram, Instagram or Threads passwords.

We store topics, notes, author voice settings, drafts, draft ratings, schedules, delivery status and available post and account metrics. Reply features process selected public posts and comments, their authors and links. A location is attached only when you choose one; device geolocation is not requested.

How we use data

Data supports drafting and editing, author voice preferences, publishing on request or a user-enabled schedule, reply preparation, results and troubleshooting. You can stop autopilot. Replies require an explicit user action.

During generation, text and selected context are sent to Cloudflare AI. During dictation, audio is sent to Cloudflare transcription; we do not store the recording in the app database. You can check and edit the transcript. Do not include other people's confidential information in notes.

Photos

If you attach a photo, it is stored with Cloudflare for the selected post. The app resizes it and creates a JPEG copy without the original metadata. Threads receives a temporary image link for publication. After confirmed publication, we delete our temporary image copy; temporary deletion failures are retried automatically. Images are retained while a post is pending or its delivery is unconfirmed. The published image remains with Threads.

Service providers

Cloudflare hosts the app and database and processes AI requests. Telegram provides the Mini App and sign-in. Meta/Threads provides authorization, publishing and metrics. These platforms process data under their own terms. You may see ReCulture Content Agent as the shared OAuth app name; this policy covers data use by THREADSHERO.

For web payments, the provider identified at checkout handles payment details; the app does not store card numbers. Subscription and payment status control access. This policy does not mean payments are currently available.

Storage and protection

Working data is stored while needed for account features or until a deletion request. User data is separated by workspace; Threads tokens are encrypted. Temporary reply sources are removed by scheduled cleanup after 24 hours; saved reply drafts may contain selected source context. Cloudflare processes infrastructure logs under its own terms. We do not sell personal data.

Your choices

You can work on texts without connecting Threads, change settings, stop autopilot and revoke access in Threads connected-app settings. Contact the owner to request a copy, correction or deletion of stored data. We verify account ownership without asking for passwords or tokens.

Deleting app data does not delete posts already published on Threads; manage those in Threads itself. See data deletion instructions.