Thamero

Privacy Policy

Last updated: 6 October 2026

Who we are

Thamero is a social media management and publishing service operated by Omran Kurbaj from Dubai, United Arab Emirates.

For any privacy question, write to info@thamero.com.

What we collect

Your email address and password — the password is stored hashed by our authentication provider and is never visible to us.

Your agency name and the names of the clients you add.

Access tokens for the social accounts you connect, with your consent.

The posts you write, the media you upload, and their scheduled times.

Why we collect it

Solely to operate the service: showing your accounts and publishing on your behalf to the accounts you explicitly authorised.

We do not sell your data, do not use it for advertising, and do not share it with third parties for marketing.

Access tokens

An access token lets us publish on your behalf without ever knowing your password. It is stored encrypted in our database, is never shown in any interface, and never leaves our servers.

You can withdraw permission at any time from the platform itself (Facebook → Settings → Apps and Websites).

Deleting your account or workspace with us destroys the tokens we hold, but it does not withdraw the permission at the platform itself. Withdraw it from the platform's settings.

Who processes data with us

AI and media processors: OpenAI, Anthropic, Google and Magnific, as enabled. Not every provider receives everything: beside each AI action we name the provider its content may be sent to, or say that it is chosen automatically among eligible providers.

Email processor: Resend — sends the service's emails. It is not an AI provider.

Storage and database: Supabase — the database, authentication and the media you upload, on servers in Frankfurt, Germany.

Hosting: Vercel — website hosting.

Payment processor: Stripe — processes subscription payments. It receives the workspace identifier and what you enter on its checkout page: email, card details, billing address, and a tax ID if you provide one.

The social platforms you connect (such as Meta) — they receive the posts you ask us to publish.

How long we keep it

We keep your data for as long as your account exists. On a deletion request, your data is erased within thirty days unless the law requires otherwise.

Your rights

You may request a copy of your data, its correction, its deletion, or withdraw consent for any connected account.

Send your request from your registered email address to info@thamero.com. We reply within seven business days.

Cookies

We use only the cookies required to keep you signed in. We use no advertising or tracking cookies and share no data with ad networks.

Changes to this policy

We may update this page. For any material change we update the date above and notify you by email.