Last modified: 2026-09-26 | Link2Threads
Link2Threads (the "Service") collects, uses, processes, and protects your personal information as described below.
| Item | Purpose | Retention |
|---|---|---|
| Threads user ID | Threads publishing and account management | Until account deletion |
| Threads username | Post identification and management | Until account deletion |
| Generated card content | Publishing and history management | Until account deletion |
| Verification, notifications | Until account deletion | |
| Account link info | Threads OAuth connection | Until account deletion |
| Threads profile info (username, profile image URL) | Account identification, UI display | Until account deletion |
| Threads OAuth access token (AES-256-GCM encrypted) | API authentication | Until account deletion |
| Post performance data (likes, replies, reposts, quotes) | Dashboard display | Until account deletion |
| usage_log observation column (IP, route, timestamp) | Traffic observation only | Until account deletion |
| Onboarding survey responses (goal, cadence, content type, language) | Service optimization, content personalization | Until account deletion |
Storage: Cloudflare D1 (SQLite) — encrypted storage in a distributed global environment.
| Third party | Purpose | Data scope |
|---|---|---|
| Paddle | Payments and subscription management | Email, payment info, plan info |
| Meta/Threads | Publishing and OAuth | Threads user ID, username |
| Cloudflare | Hosting and infrastructure | IP address, logs |
| Brevo (EU-based) | Transactional email delivery | Email address, send-event logs |
| DeepSeek (China-based, via Cloudflare AI Gateway in the US) | AI card generation | Input URL, extracted body text, tone/language instructions |
Data obtained through the Threads API is used only to provide the Service to that user. It is never sold to third parties or used for advertising/marketing purposes.
AI provider: DeepSeek (China-based). Transmission path goes through Cloudflare AI Gateway (US transit).
Transmitted: input URL, extracted body text, generated card content, tone/language instructions. Not transmitted: email, account information, Threads OAuth tokens.
Prohibited claim: we do not state that "the AI provider deletes your data" — zero-data-retention terms are not documented by DeepSeek. Processed data may be used for the Service provider's AI service improvement purposes, and confidential input is prohibited.
Rights-holder opt-out: contract termination and deletion requests are filed at privacy@link2threads.com.
Source URLs are stored in the Service database for 1 year. This retention enables response to rights-holder requests within that period, and opt-out enforcement records (request, processing result, reply) are kept as evidence of enforcement.
Transactional emails are sent through Brevo (EU-based). Transmitted items: email address and send-event logs (trigger type, send status, timestamp). Service-required notices (verification, system outage alerts, paid-plan quota notices) cannot be opted out; marketing emails can be opted out via the unsubscribe link in each email or by replying to privacy@link2threads.com.
The Service maintains a usage_log observation column for traffic measurement. The Service is not currently offered to EU users; this column exists only to observe traffic share (EU trigger condition for geogating review).
The Service uses localStorage for login session persistence and technical cookies for analytics.
Data protection officer: privacy@link2threads.com