Legal
Privacy Policy
Last updated: March 2026
ThreadLeads ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.
1. What Data We Collect
We collect the following information when you use ThreadLeads:
- Account information: your email address and password (hashed) when you sign up.
- Keywords and settings: the search keywords you configure, your product mention text, and scanning preferences.
- Thread data: public forum threads we find and score on your behalf, including titles, URLs, content previews, and AI-generated scores.
- Usage data: scan counts, reply generation counts, and timestamps to enforce plan limits.
- Payment information: processed entirely by Stripe. We never see or store your card details.
2. How We Use Your Data
We use your data to:
- Provide the ThreadLeads service: scanning forums, scoring threads, and generating replies based on your keywords.
- Enforce usage limits according to your subscription plan.
- Send you transactional emails related to your account (password resets, support responses).
- Improve the product based on aggregate, anonymized usage patterns.
We do not sell your data. We do not use your data for advertising. We do not train AI models on your data.
3. Third-Party Services
ThreadLeads relies on the following third-party services to operate:
- Supabase — database and authentication. Your data is stored on Supabase infrastructure.
- Stripe — payment processing. Stripe handles all billing data under their own privacy policy.
- Anthropic (Claude AI) — AI scoring and reply generation. Thread titles and content previews are sent to Claude for analysis. Anthropic does not use API inputs for training.
- Reddit and Hacker News — we access publicly available data from these platforms via their public feeds and APIs.
- Resend — email delivery for support tickets.
- Vercel — application hosting.
4. Data Retention
We retain your data for as long as your account is active. When you delete your account, all associated data (keywords, threads, usage records, API keys) is permanently deleted from our database. Stripe retains payment records independently per their own policy.
5. Your Rights
You have the right to:
- Access your data at any time through the dashboard and settings.
- Delete your account and all associated data by contacting us.
- Export your thread data via the API.
- Correct any inaccurate information in your settings.
6. Security
We use industry-standard security measures including encrypted connections (HTTPS), row-level security on the database, and hashed passwords. API keys are stored securely and can be revoked at any time.
7. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.
8. Contact
For any privacy-related questions or requests, contact us at pm.marine@admasol.com.