Privacy policy
The short version
We store the minimum we need to run your audits and your radar: the inputs you give us, your email, and thread metadata from the official Reddit Data API. We purge raw thread bodies after 30 days, we never sell your data, and you can ask us to delete everything with one email.
What we collect
Audit inputs. The domain, category, and competitor domains you submit when you request an AI-citation audit, plus the buying prompts we generate or you edit.
Your email. Used to deliver your report, alerts you opted into, and account messages. Joining an audit or waitlist adds you to our list; every email has an unsubscribe link.
Thread data. Thread titles, URLs, scores, comment counts, subreddit rules, and thread bodies, fetched exclusively through the official Reddit Data API under a registered, read-only app. We never scrape Reddit outside that API.
Engine answers. The answers and cited URLs returned by AI engines (ChatGPT, Google AI Overviews, Perplexity) for your prompts, so we can show you trends over time.
First-party analytics. Basic product events (audit submitted, report viewed, waitlist joined) stored in our own database. No third-party ad trackers.
What we do with it
We use this data to run your audits, score threads, match citations to your participation, and send the reports and alerts you asked for. We do not sell personal data, and we do not share it with anyone except the processors below.
Data retention
Raw thread bodies are purged after 30 days. We keep thread metadata (title, URL, subreddit, score, comment count) so your scoring history and citation matches still make sense, but the full text of Reddit posts and comments does not live in our database longer than 30 days.
Audit reports stay available at their share link until you ask us to remove them. Account data is deleted within 30 days of account closure. Anonymized, aggregated stats (for example, how often an engine cites Reddit in a category) may be kept indefinitely.
Delete my data
Email privacy@threadcite.app from the address you signed up with and we will delete your account, your audit reports, and your waitlist entry within 30 days, then confirm by reply.
Cookies
We use first-party cookies for sign-in sessions and nothing else. No cross-site tracking, no advertising pixels.
Processors
We rely on a small set of infrastructure providers to run the service: cloud hosting, a managed Postgres database, transactional email delivery, and payment processing. Each receives only what it needs to do its job, under its own data processing terms.
Changes and contact
If this policy changes in a way that matters, we will email you before it takes effect. Questions: privacy@threadcite.app.