Privacy policy

How information is handled in the thodaSocial website and private pilot.

Last updated: 24 October 2026

Who operates thodaSocial

thodaSocial is an independent project operated by crazyNess. It is in private pilot, with no public signup. You can contact crazyNess through the contact form or submit a data-deletion request. Your request is delivered to a private inbox; the operator’s personal email is not displayed on the website.

When you visit this website

This public website does not ask you to sign in, run advertising pixels or use analytics scripts. If you submit a form, it collects your reply email, optional name, account or workspace details you provide, request scope and message. Required fields are identified on the form. We use this information to review, respond to and resolve your request, and to verify your authority before disclosing or deleting account data. Requests are delivered through Resend to a private operator inbox. We do not add you to a marketing list. Cloudflare hosts and delivers it and may process network information such as IP addresses and request logs for delivery, security and abuse prevention.

Request handling and spam prevention

Cloudflare processes the form submission and uses network information for short-lived rate limits. Signed form sessions and an empty-field spam check help limit automated abuse. Your message is not intentionally written to application logs or a website database. A copy is processed by the email provider and retained in the operator’s mailbox as needed to handle the request and record its outcome, subject to security or legal requirements. You can ask about that record using the contact form.

When you use the private workspace

The workspace can process your user and workspace identifiers; account names and platform identifiers; granted permissions and authorization tokens; drafts, captions, uploaded media and schedules; approvals, publishing results, connection checks and activity records; and available reporting data.

Connected platforms provide information only within the access you authorize and their API permissions. The private workspace currently uses ChatGPT hosting and sign-in. Its authentication is separate from this public site. The standalone beta uses email verification codes and isolated workspaces; the dedicated reviewer deployment uses separate review credentials.

How information is used

Information is used to authenticate authorized users, show connected accounts, prepare and review content, publish approved posts, run scheduled connection checks, hold affected posts when access fails, show results and troubleshoot issues. thodaSocial does not sell your information or use it for advertising.

Service providers and platforms

The pilot uses OpenAI/ChatGPT for the hosted workspace, Cloudflare for infrastructure and storage, and Resend for configured email notifications. Connected social platforms receive the content and requests needed to carry out authorized actions. These providers process information under their own terms and may process it in other countries.

If you authorize an AI assistant to use the workspace, data it accesses may also be processed by the assistant provider you choose. Public access to this website does not authorize an AI assistant to read private workspace data.

Protection and retention

Connection credentials are stored encrypted on the server. Workspace permissions restrict account access. No service can guarantee absolute security.

Data is retained as needed to operate the pilot, support authorized users, investigate security issues and meet applicable obligations. Disconnecting an account revokes or stops access but does not automatically erase all stored content. Deleting a draft in the workspace may be recoverable and is not the same as requesting data erasure.

Standalone beta retention

In the standalone beta, uploaded post media is eligible for deletion seven days after publication has been verified. Captions and publishing history are retained. Failed or unverified publication is held for review. Other deployments have separate storage and deletion handling. See the beta Privacy Notice for its detailed retention and consent information.

Your choices

You can revoke thodaSocial’s permissions in the connected platform’s settings and ask crazyNess through the contact form for access or correction, or through the deletion form for erasure. We may need to verify that the request relates to your account before acting. Read how to request deletion.

For consent withdrawal, access, correction or grievance requests, use the contact form. For erasure, use the deletion form. Identity and authority are verified before action.

Changes

This page will be updated as the service changes. Material changes affecting pilot participants will be communicated through the existing pilot relationship.