This text is a draft. It has not been reviewed by a lawyer and may change before Tinta opens to the public.
Privacy policy
Last updated:
Tinta is not open to the public yet. This policy describes the data Tinta will process when it opens and what this website does today.
Who is responsible
Pasqual Peñalver, Barcelona (Spain), is responsible for processing. Contact: hello@tinta.re.
Data we will process
When you connect a Threads account, Tinta will process: your Threads ID, username, name and avatar; the access token (stored encrypted); the posts you write in Tinta and the posts imported from your account (the last 90 days when you connect, then new ones) so we can measure them; the metrics of those posts and a daily snapshot of your follower count; your sessions; your API keys (stored hashed); your hub content (links and uploaded files); and, for Pro accounts only, the Threads ID and username of the people who reply to your posts, never the text of their replies.
Why and legal basis
Contract: to provide the service you ask for (publishing your posts, showing your metrics and keeping their history). Legitimate interest: security, abuse prevention and, for Pro accounts, the reply-author data behind the top fans feature. Consent: where we ask for it, for example for anonymous aggregate statistics, and you can withdraw it at any time.
How long
Metrics are kept while your account is connected and for 90 days after you disconnect it, then deleted, except anonymous aggregates. Reply authors are deleted after 90 days. When you disconnect an account, its access token and content are deleted immediately. Encrypted backups are kept off the server and roll off within 30 days. A data deletion request deletes everything immediately; see the data deletion page.
Who else sees it
Our recipients are OVH (hosting, in the EU) and Meta (Threads), the platform you connect. Data from third parties, such as authors of replies, is only visible to the organisation that obtained it. We do not sell data. When agency and team features launch, we will add the processor terms they need.
International transfers
Meta Platforms is based in the United States. Data exchanged with Threads goes to Meta under Meta's own terms. Where that involves a transfer outside the EEA, it relies on the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
Under the GDPR you can request access, rectification, erasure, restriction, portability and objection, and complain to the Spanish data protection authority (AEPD). Write to hello@tinta.re; see also the data deletion page.
This website
This website uses no cookies, no analytics and no third-party requests. If you pick a theme, your choice is stored in your browser (localStorage) and never leaves your device.
Questions or requests about this page: hello@tinta.re