Privacy Policy
effective august 2026 · draft — pending counsel review
What we collect from you
Account data (name, email, workspace settings) via our auth provider (Clerk); billing data via Stripe — we never see full card numbers; product usage (signals you create, feedback you give on leads). Feedback labels are used to tune your own signals.
What we collect from public sources
We ingest publicly available posts from social platforms: post text, author handle and public profile fields, timestamps, and engagement counts. We store excerpts and link back to the original post. We do not access private accounts, direct messages, or closed communities. On platforms where users are pseudonymous (e.g. Reddit), we deliberately do not attempt to unmask identities.
Contact enrichment
On paid tiers, we resolve public professional identity (e.g. job title, company) and, on the Scale tier, business contact information via third-party data providers, only for post authors whose content qualified as a lead for a customer. We never enrich on platforms whose norms are pseudonymous.
Processors we use
Clerk (authentication), Stripe (payments), Vercel (hosting), Neon/Supabase (database), Trigger.dev (background jobs), Together AI (automated post classification), social-data gateways for ingestion (e.g. UnifAPI), and Slack/Resend for the delivery channels you configure.
If your post appears in our system
We index public posts to help businesses find relevant conversations. If you'd like your content or profile removed from our systems, email privacy@threadsonar.com with a link to the post or profile — we process deletion requests within 30 days and suppress re-ingestion going forward.
Retention & deletion
Workspace data is retained while your account is active and deleted within 90 days of account deletion on request. Public-post corpus data is retained while relevant to active signals.
Your rights
Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data. Contact privacy@threadsonar.com. EU/UK customers: a Data Processing Agreement is available on request.