Privacy policy · Capitol Social Desk

Last updated: 13 November 2026

This policy covers the Capitol Social Desk web tool (redes.capitolab.es), operated by Capitol (capitolab.es), contact: contacto@capitolab.es. The general privacy policy of capitolab.es is at capitolab.es/politica-de-privacidad.

What we access

• threads_basic: your Threads user ID and username, to show who is logged in.
• threads_keyword_search: public Threads posts that match a keyword you type. They are shown on screen and not stored.
• threads_content_publish: to publish the replies that you write and confirm with the “Publish reply” button.

What we store

• Your access token, user ID and username, in a server-side session that expires after 8 hours or when you log out.
• A daily counter of replies per account (to enforce the limit of 15 per day).

We do not store the posts returned by search, we do not build profiles of other users, we do not sell or share data, and we do not use it for advertising or to train AI models.

Retention and deletion

Sessions expire automatically. You can delete everything at any time by logging out, by removing the app in Threads (Settings → Account → Website permissions), or by following the steps on Data deletion.

Security

Data is kept on our own server in the EU with restricted access and is transmitted only over HTTPS.

Your rights

Under the GDPR you may request access, rectification or erasure by writing to contacto@capitolab.es.