GDPR & Global Privacy Standards

Privacy Policy

Effective Date: October 21, 2026 · Last Updated: October 2026

1. Overview & Commitment

ThreadMiner (“we”, “our”, or “us”), operated by Neoresume LLC, is committed to protecting your privacy. This Privacy Policy describes how we collect, store, and process personal data when you use our website, public discussion monitoring radar, and authenticated customer dashboard.

Our order process is conducted by our online reseller and Merchant of Record, Paddle.com.

2. Data We Collect

  • Account Credentials: Email address, workspace name, and hashed passwords when registering an account.
  • Billing Information: Payment and order processing is handled directly by our Merchant of Record, Paddle.com. ThreadMiner does not store your full credit card number or CVV. Paddle processes and stores transaction details according to its strict PCI-DSS Level 1 compliance.
  • Monitored Domains & Keywords: Product websites, competitors, and keyword sets configured for your scanning feeds.
  • Public Forum Telemetry: Public discussions collected through official public APIs of Reddit, X/Twitter, and Hacker News. We do not index private messages, closed channels, or password-protected forums.

3. Cookie & Local Storage Policy (EU ePrivacy Compliant)

We strictly limit our use of cookies and local storage tokens:

  • Essential Cookies: Encrypted NextAuth session tokens required to authenticate you into your dashboard securely.
  • Consent Preference: Local storage key (tm_cookie_consent) recording your cookie selection.
  • No Third-Party Ad Trackers: We do not sell user data to advertising brokers or embed behavioral cross-site retargeting cookies.

4. AI Processing & Sub-Processors

When generating discussion sentiment summaries, discussion snippets are evaluated using OpenAI public enterprise API endpoints with zero-data-retention agreements. Your company data is never used to train generalized foundation models.

5. Data Subject Rights (GDPR & CCPA)

Under European GDPR and California CCPA regulations, you have the right to:

  • Request access to all personal data stored in your workspace.
  • Request permanent deletion of your account and related telemetry (“Right to be Forgotten”).
  • Export your monitored topics, drafts, and configuration data in structured JSON format.

6. Contact Data Protection Officer

For privacy inquiries or data deletion requests, contact our Data Governance team at [email protected].