Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains what personal data the Threads Engagement Automation browser extension and its companion website (didudi.com/threads) collect, why we collect it, how we store and protect it, and who we share it with. The extension is operated by an individual developer based in the United States ("we", "us"). If you have questions, contact us at privacy@didudi.com.

1. Who We Are & Scope

Threads Engagement Automation is a browser extension that helps you schedule posts, generate content, and engage with other accounts on Threads (threads.com / threads.net) using your own Threads account, while keeping that account safe. This policy applies to the extension, our backend service, and our marketing and account websites.

2. Data We Collect

We collect only what the product needs to function. Specifically:

Account & identity data

Your name and email address, obtained when you sign in with Google (OAuth).
Authentication tokens that keep you signed in, stored on your device and validated by our backend.
Your subscription plan and billing status.

Content & activity data

The text of Threads posts you choose to engage with, which is processed to generate replies and comments.
"Leads" — the public usernames and profile details of accounts your configured campaigns engage with, plus the comments the extension posts, so you can review and export them.
Your configuration: business description, tone/keyword settings, schedules, and campaign rules.

Payment data

When you subscribe, payment is processed by our payment providers (Stripe and SePay). We receive a confirmation and limited transaction metadata (amount, date, status). We do not collect or store your full card number.

Technical data

Basic device/browser information and log data (e.g. error reports, timestamps) used to operate the service and diagnose problems.
Local settings and cache stored via the browser's storage API on your own device.

We do not collect your Threads password. Automation runs inside your own logged-in browser session; we never ask for or receive your Threads/Meta credentials.

3. How We Use Your Data

To authenticate you and provide the extension's features (posting, AI content generation, engagement, and lead collection).
To generate comment and post suggestions via our AI provider.
To process subscriptions and prevent abuse of paid features.
To send you optional notifications you have enabled (e.g. Telegram alerts when a post needs you).
To maintain, secure, debug, and improve the service.
To comply with legal obligations.

4. How We Store & Protect Data

Settings, tokens, and cache are stored locally on your device through the browser's storage API. Account data, leads, and configuration are stored on our backend servers. Data is transmitted over encrypted (HTTPS/TLS) connections, and access to our servers is restricted. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

5. How We Share Data (Third Parties)

We do not sell your data. We share data only with the service providers required to run the product, and only as described below:

Third party	What is shared & why
Google (Sign-In)	OAuth authentication; we receive your name and email to create your account.
DeepSeek (AI)	The post/content text you choose to act on is sent to `api.deepseek.com` to generate replies and comments.
Stripe & SePay	Payment processing for subscriptions. They handle card details under their own privacy policies.
Telegram	Only if you connect it: we send the notifications you enable to your chosen Telegram chat.
Meta / Threads	The extension operates on Threads using your own account; your actions occur on Meta's platform under Meta's terms.
Hosting provider	Our backend runs on secured servers that store your account data on our behalf.

We may also disclose data if required by law, to enforce our terms, or to protect the rights and safety of our users.

6. Limited Use Disclosure

Our collection and use of information received from Google APIs, and all user data obtained through the extension, adhere to the Chrome Web Store User Data Policy, including its Limited Use requirements. Specifically, we do not:

sell this data, or transfer it to data brokers or other information resellers;
use or transfer it to serve personalized or targeted advertising;
use or transfer it to determine creditworthiness or for lending purposes;
allow humans to read the data, unless (a) you give explicit consent, (b) it is necessary for security purposes or to comply with applicable law, or (c) the data is aggregated and anonymized and used to operate or improve the service.

7. Data Retention & Deletion

We retain your account data and leads for as long as your account is active.
If your account is inactive for 12 months, we automatically delete its associated data.
You can delete your data at any time by requesting it at privacy@didudi.com; we will remove your personal data within 30 days, except where we must retain limited records to meet legal or accounting obligations.
Data stored locally in your browser is removed when you uninstall the extension or clear its storage.

8. Your Rights

Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email privacy@didudi.com. You can also export your collected leads at any time from your dashboard.

9. Children's Privacy

The service is intended for users aged 18 and older and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying you in the extension or by email.

11. Contact Us

Questions or requests about this policy or your data: privacy@didudi.com.