Reference
Security and privacy
How Threadly handles your data and keys.
Authentication
Sign-in is Google-only via Firebase Authentication. There are no passwords stored by Threadly.
API keys
Platform keys exist only as server environment variables. Keys you connect yourself are encrypted with AES-256-GCM before storage, decrypted only at scan time on the server, and never returned by the API beyond a masked last-four. Keys are never logged and never appear in scan results.
Workspace data
Brand profiles, tracked questions, scan runs and results are stored per user in Firebase Realtime Database and served only to the owning account over authenticated requests.
The demo
The public demo renders static, labelled sample data for a fictional brand and never calls paid AI APIs.