What Threads Manager processes, why, on which lawful basis, for how long, and how to exercise rights.
Controller and scope
The controller is Miguel Ángel Nieto, NIF 44687663C, at Calle Llull 356-360, Esc B, 6-1, 08019 Barcelona, España. Privacy contact: correo@miguelangelnieto.net.
Processing covers invited users and public authors whose comments or interactions are retrieved through the Threads API.
Data and purposes
- Threads identity, profile, encrypted OAuth tokens, and permissions for authentication and account connection.
- Posts, drafts, media, comments, public commenter names, metrics, demographics, and derived interests for publishing, sync, analytics, and export.
- Language, report preferences, and configured email for requested personalization and delivery.
- Security, operational, and error logs to protect and maintain the service.
- Content sent to an AI provider only after separate AI consent, which is off by default.
Lawful bases
Performance of the accepted terms supports core functions; consent supports OAuth and optional AI processing; legitimate interests support security, abuse prevention, and minimal logs; legal duties support required retention. Public commenter data is minimized and processed to provide requested analytics.
Retention
Account data is kept while active. Deletion has a seven-day recovery period, then active account data and media are removed. Local drafts remain in the browser until cleared. Operational metric schedules remain as documented.
Exceptions may apply for Obligaciones legales, investigaciones de seguridad, solicitudes de autoridades competentes y copias de seguridad cifradas pendientes de alcanzar su fecha normal de expiración. Backups expire on their defined cycle and are not restored for ordinary use.
Recipients and transfers
Published subprocessors receive only necessary data. Meta receives OAuth requests and content intended for Threads. SMTP receives enabled reports. AI receives content only with separate consent.
Locations, DPA/privacy links, and transfer mechanisms are listed at /subprocessors. Data is not sold or used for behavioral advertising.
Your rights
Request access, rectification, erasure, objection, restriction, or portability at correo@miguelangelnieto.net. Identity is verified proportionately and responses normally arrive within one month. You may complain to the Spanish Data Protection Agency (AEPD).
Account export and deletion are self-service. Withdrawing AI consent does not withdraw general terms acceptance.