Privacy Policy

Effective date: November 5, 2026

1. Who is responsible for your data

RoboThreads is operated by RoboThreads.cc, based in Ontario, Canada (“we”, “us”). We are responsible for personal data processed through robothreads.cc, your account and the RoboThreads browser extension (the “Service”). Contact: support@robothreads.cc.

2. Data we collect

• Account data: your email address and password. Passwords are stored only in hashed form by our authentication provider; we cannot see them.
• Subscription data: your plan, its start and end dates, and payment status. Payments are processed by Lemon Squeezy, our reseller and merchant of record; we receive confirmation of payment and limited billing details (such as country and the last digits of a card, if provided), never your full card number.
• Extension access data: a hashed version of your sign-in key, identifiers of the devices you link (up to two), sign-in times and the extension version.
• Usage data: technical logs and counters needed to operate, secure and limit the Service, such as request times, error codes, AI usage amounts and diagnostic IDs. We design logs to exclude your keys and the content of your posts.
• Content you process with AI: when you use an AI feature, the relevant input is sent to our servers and to an AI model provider to produce the result. This may include your prompt, your product description, and text of public Threads posts from pages you open in your browser.
• Data stored in your browser: the extension keeps its settings, history and collected tables locally in your browser. The website stores your sign-in session and small preferences in your browser’s local storage.
• Support messages: anything you send us by email.

We do not intentionally collect sensitive personal data, and we ask you not to submit it.

3. How we use data

• to create and secure your account, verify your subscription and enforce the device limit;
• to provide the extension’s features, including AI generation and analysis you request;
• to process payments, prevent fraud and abuse, and keep records required by law;
• to provide support and send service messages (for example password resets or important changes);
• to maintain, debug and improve the Service.

We do not sell personal data, do not share it for cross-context behavioral advertising, and do not use the content you process to train our own AI models.

4. Legal bases (EEA/UK users)

We process data to perform our contract with you (account, subscription, features), for our legitimate interests (security, abuse prevention, improving the Service), to comply with legal obligations (tax and accounting), and with your consent where required.

5. Who we share data with

We share data only with service providers who help us run the Service, under contracts that limit their use of it:

• Hosting and network: Cloudflare (website delivery and security).
• Authentication, database and file storage: Supabase.
• AI processing: AI model providers, accessed through OpenRouter. If you connect your own OpenRouter key, your requests are processed under your own agreement with OpenRouter.
• Payments: Lemon Squeezy, our reseller and merchant of record, which processes payments and billing under its own privacy policy.
• Email delivery: a transactional email provider for service emails.
• Fonts: the website loads fonts from Google Fonts, which receives your IP address when the page loads.

We may also disclose data if required by law, to protect our rights or users’ safety, or as part of a business transfer such as a merger or sale, in which case this policy will continue to apply.

6. International transfers

Our providers may process data in Canada, the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep data

• Account and subscription data: while your account is active, then deleted or anonymized within 90 days after account deletion, except records we must keep for tax, accounting or legal reasons (typically up to 7 years).
• Technical logs: usually up to 90 days.
• AI request content: processed to return the result and not kept by us longer than needed for that purpose and short-term troubleshooting. AI providers may retain data under their own policies.
• Data stored locally in your browser stays there until you clear it or remove the extension.

8. Security

We use encryption in transit (HTTPS), hashed passwords and sign-in keys, access controls that keep account tables closed to the public, and limits on sensitive actions. No system is completely secure, so please use a strong, unique password and keep your sign-in key private.

9. Your rights

Depending on where you live (for example under PIPEDA in Canada, the GDPR in the EEA/UK, or the CCPA/CPRA in California), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To make a request, email support@robothreads.cc from the address linked to your account. We will respond within the time required by law and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

10. Cookies and similar technologies

We do not use advertising or tracking cookies. The website uses your browser’s local storage only for essential functions such as keeping you signed in and remembering basic preferences. If we add analytics in the future, we will update this policy and ask for consent where required.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. If a change is material, we will notify you by email or on the website before it takes effect. The effective date above shows when it was last updated.

13. Contact

Privacy questions and requests: support@robothreads.cc.