Privacy Policy

Threshly (“we”) provides Threshly, software that real estate agencies use to answer Instagram comments and direct messages with the help of an AI assistant and to manage the resulting leads. This policy explains what data we process, why, and the choices you have.

Who this applies to

• Agencies that connect their Instagram professional account to Threshly, and their team members.
• People who message or comment on a connected agency’s Instagram account. For their data, the agency decides why it is collected; we process it on the agency’s behalf.

Data we process

• Agency account data: names, email addresses, roles, and settings of team members.
• Instagram data received through Meta’s official Instagram API: the account’s username and ID, access tokens (stored encrypted), comments on the account’s posts, direct messages exchanged with the account, and the sender’s Instagram username and name when Instagram provides them.
• Information people choose to share in messages, such as phone numbers, budgets, preferred locations, and voice messages.
• Technical logs needed to run and secure the service (for example IP addresses of team members at login).

Why we use it

• To reply to comments and messages on the agency’s behalf and hand conversations to the agency’s staff.
• To organize inquiries into leads for the agency and notify its team.
• To keep the service secure, prevent abuse, and meet legal obligations.

We do not sell personal data and do not use it for advertising.

Service providers

Message text, and voice or image content when sent, is processed by Google’s Gemini API to generate replies. Data is stored on servers we operate or rent. Each provider processes data only to provide its service to us.

Retention

Conversation and lead data is kept while the agency’s account is active. An agency can disconnect Instagram at any time; when an account is deleted, or a data deletion request is made through Instagram, the related contacts, conversations, messages, comments, and leads are deleted.

Your choices

• You can ask the agency you contacted to access, correct, or delete your data, or remove our app from your Instagram settings (Settings → Apps and websites), which sends us a deletion request.
• Agency team members can update their profile in the dashboard and ask the agency owner to remove their access.

Security

Access tokens are encrypted at rest, connections use HTTPS, each agency’s data is isolated from other agencies, and staff access is limited by role.

Contact

Contact details for privacy requests will be published here.