Privacy Policy
Last updated: 7 September 2026
kldbv ("we", "the app") is a social-listening and engagement tool for Threads, operated by ИП Abay (Individual Entrepreneur Abay, IIN 000718550375), registered at проспект Абылай хана, д. 12/2, кв. 4, Астана, 010000, Kazakhstan. This policy explains what we collect when you connect your Threads account, why, and how to remove it.
What we collect
- Threads profile basics — your Threads user ID, username, display name and profile picture, retrieved from the Threads API after you log in.
- A Threads access token — issued by Meta when you authorise the app. It is stored encrypted at rest and used only to make Threads API calls you initiate.
- Your activity in the app — the keyword searches you run and the replies you publish through the app, kept so you can see your own history.
We do not collect your password, payment details, contacts, or any data outside the Threads permissions you grant.
How we use it
- To search public Threads posts by the keywords you enter
(
threads_keyword_search). - To publish replies that you write to posts you choose
(
threads_content_publish). - To show your profile and your own activity inside the dashboard
(
threads_basic).
We use your data only to provide these features. We do not sell it, share it with advertisers, bulk-export it, or use it to build profiles of other people. Public post data returned by search is shown to you at the moment of the search and is not resold or redistributed.
Storage & security
Data is stored in a managed Postgres database (Neon) accessed over TLS. Access tokens are encrypted with a key held separately from the database. Only the app server can read them.
Retention & deletion
We keep your data until you delete it. Erasing it from the Data Deletion page, or by removing the app from your Threads settings, is immediate and permanent. Requests sent by email are completed within 30 days.
Third parties
We rely on Meta's Threads API (subject to Meta's own terms). Our processors, all of which handle data in the United States, are:
- Neon — managed Postgres hosting: your account profile, encrypted token, and your own activity log.
- Vercel — application hosting; requests pass through it.
- Anthropic — when the product drafts a candidate reply, the text of the public post being replied to is sent to the model. No tokens or credentials are sent.
- GitHub — runs our scheduled jobs.
We do not integrate advertising or analytics trackers, and we never sell or share your data for advertising.
Government and law-enforcement requests
If a government body or law-enforcement agency asks us for personal data, we apply the following, every time:
- We check that the request is lawful — valid legal basis, proper authority, correct jurisdiction — before we act on it.
- We challenge requests we believe are unlawful, overbroad, or improperly served, and we do not comply while a challenge is open unless compelled to.
- We disclose the minimum necessary — only the specific data the lawful request actually requires, never a broader export.
- We keep a record of every such request, who made it, its legal basis, and what we disclosed in response.
Where we are legally permitted to do so, we will tell the affected person about a request concerning their data.
Contact
Questions or requests: abay@kldbv.com.