Privacy policy

Last updated: 26 October 2026

Who we are

This policy applies to ervero.com and to the apps operated by Ervero, including our app that connects to Threads through the Threads API ("the app"). The data controller is Dmitry Khapenkov PR Beograd, a sole proprietorship registered in Belgrade, Serbia, at Jurija Gagarina 231, 11070 Beograd (Novi Beograd), Serbia. Contact: hello@ervero.com.

What the app does

The app is a business tool for managing our own presence on Threads. It lets an authorized account publish and delete posts, read and answer replies and mentions, see insights for its posts, and research public posts and public profiles by keyword to understand which topics and formats resonate.

Data we collect

When you connect a Threads account to the app and grant permissions, we receive through the Threads API, depending on the permissions granted:

• profile information: Threads user ID, username, name, profile picture and biography;
• your posts and replies, and the replies and mentions addressed to you;
• insights for your profile and posts, such as views, likes, replies, reposts and quotes;
• the content you publish or delete through the app;
• an access token that lets the app act on your behalf.

For research, the app also retrieves public Threads posts and public profile information returned by keyword search and profile discovery. This includes the author's username and the public text and metrics of the post.

This website does not use cookies or analytics. Our hosting provider, Cloudflare, processes technical request data (such as IP address and browser type) to deliver the site and protect it from abuse.

How we use it

• to publish and manage content on the connected account at its owner's request;
• to show the account owner its replies, mentions and insights;
• to study public posts in aggregate, so we can decide what to write about and which products to build.

We do not sell personal data. We do not use it to target ads at individuals, to build profiles of individual people, or for any purpose not described here. We do not share it with third parties, except service providers that host our infrastructure on our behalf, or where the law requires it.

Legal basis

We process data of a connected account on the basis of the consent given when the account is authorized. We process public posts on the basis of our legitimate interest in understanding public conversations relevant to our work. We comply with the Serbian Law on Personal Data Protection and, where it applies, the EU General Data Protection Regulation (GDPR).

Storage and retention

Data is stored on infrastructure controlled by Ervero and protected by access controls. Access tokens are kept until access is revoked or the token expires. Data of a connected account is kept while the account stays connected and is deleted within 30 days after it is disconnected. Public posts collected for research are kept no longer than 12 months.

Your rights

You may ask us for access to, correction of, or deletion of your personal data, object to its processing, or withdraw your consent at any time. Write to hello@ervero.com; we answer within 30 days. See data deletion for the quickest way to remove your data. You can also lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

Changes

We will publish any change to this policy on this page and update the date above.