Privacy Policy

Varogo (“we”, “us”) is a marketing strategy service for indie developers. This policy explains what data we collect when you connect your Threads account to Varogo, how we use it, and how you can delete it. By using Varogo, you agree to the practices described below.

1. Data We Collect

When you sign up for Varogo, we collect the email address and password you provide. When you connect your Threads account through Meta’s OAuth flow, we additionally receive and store:

• Your Threads user ID
• Your Threads username
• An OAuth access token issued by Meta, along with its expiry timestamp

We do not collect your Threads password, private messages, follower lists, or any other profile data beyond what is listed above.

2. How We Use Your Data

• Authentication: identifying your Threads account and showing your connection status inside Varogo.
• Publishing on your behalf: posting content you have explicitly reviewed and chosen to publish to your own Threads account.

We do not post, like, follow, or take any other action on your Threads account without an explicit request initiated by you in the Varogo interface.

3. How We Store and Protect Your Data

• Threads access tokens are encrypted at rest using AES-256-GCM before being written to our database. Plaintext tokens are never persisted.
• All traffic between your browser, Varogo, and the Meta / Threads API is transmitted over HTTPS.
• Access to our production database is restricted to authorized maintainers.

4. Data Sharing

We do not sell, rent, or share your personal data or your Threads data with third parties for their own marketing or analytical purposes. Your Threads access token is used exclusively by Varogo to call the official Meta / Threads API on your behalf.

5. Data Retention and Deletion

• When you disconnect Threads from the Integrations page, your Threads user ID, username, and access token are immediately and permanently deleted from our database.
• When you delete your Varogo account, all associated data — including any Threads connection — is removed.
• You may also request deletion of your data at any time by emailing us at the address below. We will process verified requests within 30 days.

6. Contact

For privacy questions or data deletion requests, contact us at wjdqls9223@gmail.com.