Privacy Policy

1. Personal Data Controller

The data controller for ThauRed is IvorySoft LLC, Yulii Zdanovskoi st. 36V, apt. 219, Kyiv, 03022, Ukraine ("we", "us", "our"). This Privacy Policy explains how we collect, use, and share personal data when you use the ThauRed dashboard (app.thaured.com), website (thaured.com), and browser extension (together, the "Service").

If you have questions about this policy or your data, contact us at [email protected].

2. What Categories of Personal Data Do We Collect?

Account data. When you sign in, we collect your email address and name via Google Sign-In (or an email address if you use email sign-in). We do not receive your Google password.

Reddit account data. The Reddit usernames and account details you connect, and activity you record in the Service (e.g. which opportunities you marked done).

Project & configuration data. The product pitch, description, target audience, subreddits, watchlists, and reply-tone settings you create.

Usage & analytics data. Pages viewed, features used, and events, collected through Google Analytics and Amplitude, plus standard log data (IP address, browser type, timestamps).

AI provider keys. If you choose to connect your own AI provider, the API key you supply, stored to make requests on your behalf.

Billing data. Subscription status and billing metadata. Payment card details are collected and processed by Stripe — we never see or store your full card number.

3. For What Purposes Do We Process Your Personal Data?

• •To provide the Service — scan subreddits, score opportunities, run account warmup, and draft replies you review.
• •To authenticate you and keep your dashboard and extension in sync.
• •To process subscriptions, trials, and payments (via Stripe).
• •To measure and improve the Service, and to understand how it is used (analytics).
• •To provide support and communicate with you about the Service.
• •To detect, prevent, and address abuse, security issues, and violations of our Terms.
• •To comply with legal obligations.

4. Legal Basis for Data Processing (EEA Only)

If you are in the European Economic Area (EEA) or UK, we process your personal data on the following bases under the GDPR:

• •Performance of a contract — to provide the Service you sign up for.
• •Legitimate interests — to secure, maintain, and improve the Service, provided these do not override your rights.
• •Consent — for optional analytics/tracking, where required. You may withdraw consent at any time.
• •Legal obligation — where processing is required by law.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for authentication, to remember preferences, and for analytics. We use Google Analytics and Amplitude to understand product usage. We do not run third-party advertising networks or sell your data to advertisers.

You can control cookies through your browser settings, and opt out of analytics as described in the “Your Analytics Choices” section below.

6. With Whom Do We Share Your Personal Data?

We do not sell your personal data. We share it only with service providers who process it on our behalf, under appropriate safeguards:

• •Supabase — authentication and database (hosting your account and application data).
• •Google — Google Sign-In, and Google Analytics / Firebase for analytics.
• •Amplitude — product analytics.
• •Stripe — payment processing and subscription management.
• •Vercel — website and application hosting.
• •AI providers — where you connect an AI provider (e.g. via OpenRouter) to draft replies, the necessary content is sent to that provider to generate a draft. This uses your configured key and is subject to that provider's terms.

We may also disclose data where required by law, to enforce our Terms, or in connection with a merger, acquisition, or sale of assets (with notice).

7. Reddit Accounts You Connect

ThauRed lets you connect one or more Reddit accounts so it can help you find and engage with relevant threads. We store the Reddit usernames you connect and the engagement activity you record.

ThauRed does not post to Reddit on your behalf. It drafts replies that you review, edit, and post yourself. Your use of Reddit remains subject to Reddit's own User Agreement and Privacy Policy, and to each subreddit's rules. ThauRed is not affiliated with, endorsed by, or sponsored by Reddit, Inc.

8. The Browser Extension

The ThauRed browser extension runs in your browser to scan Reddit for relevant posts and to assist you while you engage. It reads content from Reddit pages you visit in order to provide these features, and communicates with the ThauRed dashboard using your authenticated session.

The extension does not read pages on unrelated websites for its features, does not sell browsing data, and does not inject advertising. Any permissions requested are limited to what the scanning and drafting features require.

9. AI-Generated Content & Your Provider Keys

Reply drafts and scores are generated with AI. To do this, relevant context (such as the Reddit post and your project settings) is sent to the AI provider to produce a draft you can review. Drafts may contain inaccuracies — you are responsible for reviewing and editing anything before you post it.

If you supply your own AI provider API key, we store it to make requests on your behalf and do not use it for any other purpose. Content processed to generate your drafts is used to operate the Service for you and is not used to train public AI models by us.

10. Data Storage & Security

Your data is stored with our infrastructure providers (primarily Supabase) using industry-standard safeguards, including encryption in transit. We restrict access to personal data to what is necessary to operate the Service. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law.

12. International Data Transfers

We operate internationally and may process and store your data in countries other than your own, including outside the EEA. Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) to protect your data.

13. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request deletion or correction, and to opt out of any “sale” or “sharing” of personal information as defined by the CCPA/CPRA. We do not sell your personal information. You will not be discriminated against for exercising these rights. To make a request, contact us at [email protected].

15. Your Analytics Choices

You can opt out of Google Analytics using Google's opt-out browser add-on, and you can use browser controls or privacy extensions to limit analytics generally. Disabling analytics does not affect your ability to use the Service.

16. Age Limitation

ThauRed is a business tool intended for users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

17. How Do We Handle “Do Not Track” Requests?

Some browsers offer a “Do Not Track” (DNT) signal. There is no industry-standard response to DNT signals, so we do not currently respond to them. We describe your actual choices in the sections above.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance.

19. Contact Us

If you have questions or requests regarding this Privacy Policy, contact IvorySoft LLC at [email protected] (Attention: Privacy), Yulii Zdanovskoi st. 36V, apt. 219, Kyiv, 03022, Ukraine.