Privacy Policy

Effective October 1, 2026

This policy explains how BETBOY LLC (brand name Thonails; "we", "us") collects, uses and protects information when you use Thonails.com at https://thonails.com, including posting an ad and receiving text messages from us.

1. Information we collect

  • What you give us when you post an ad: your name, business name, mobile phone number, e-mail (optional), city, state, ZIP code and the text of your ad.
  • Other phone numbers you add to an ad: up to a few more numbers, each with a short label. We text each one a one-time code once to confirm it, show them on your ad only when someone taps "Show number", and never send them our texts. You can remove them at any time.
  • Phone verification: we text a one-time code to confirm the number belongs to you. We store only a scrambled (hashed) copy of the code, and only until it is used or expires.
  • Text-message consent: if you tick the box to receive texts, we record that you agreed, when, how (for example "ad form, phone verified by code") and the IP address used. If you reply STOP, we record that too.
  • Messages: texts you send to our numbers and our replies.
  • Payments: when you pay for an ad, a renewal or a paid option, PayPal processes the payment (card, PayPal, Venmo or Apple Pay). Card numbers go directly to PayPal; we never see or store them, including when you give your card to our staff by phone (they type it into PayPal's secure form). We keep a record of each payment: amount, date, how it was paid, the card brand and last 4 digits, the payer's name and e-mail from PayPal, and PayPal's transaction number.
  • Saved cards: if you choose to save a card (by ticking the box at checkout, or by telling our staff on the phone), PayPal keeps it. We keep only PayPal's reference to it, with the brand, last 4 digits and expiry date, so you can pay faster next time. A saved card is charged only when you ask us to (online, or by confirming the last 4 digits with our staff). You can remove it at any time.
  • Sign in with Google, Facebook or Apple: if you choose it, that company tells us an ID for you, your name and your e-mail address (Apple may give us a private relay address). We use them only to sign you in and, if your account has none yet, to fill in your name and receipt e-mail. We don't get your password or anything else from that account, and we post nothing there. You can remove it under My account → Settings.
  • Technical information: IP address, browser type and the cookies needed to run the site (see section 5).

2. How we use it

  • To publish your ad. The contact details on your ad (name, business, phone, e-mail if given, city and state) are shown publicly so people can reach you.
  • To confirm your phone number, review ads before they go live and keep the site free of spam and fraud.
  • To send the text messages you asked for: one-time codes (posting an ad, signing in, confirming a number), notices when your ad is approved or not, reminders before your ad expires with a link to renew it, texts when someone writes to you about your ad or replies to your message, and, if you sign up for text alerts, at most one text a day with new ads for your saved search.
  • To answer your questions and keep records required by law.

3. Text messages

Receiving texts is optional and is not required to post an ad, browse or pay. One-time codes are sent only when you ask to post an ad, sign in or confirm a number. If you sign up for text alerts, we keep your number and saved search to send them. Message frequency varies (usually no more than about 3 texts per ad). Message and data rates may apply. Reply STOP to stop receiving texts and HELP for help. See our SMS Terms for details.

4. Sharing

We do not sell your personal information. We share it only:

  • publicly, for the ad details you choose to publish. Live ads may also be shared on our Facebook Page (photos, title, details, city and a link to the ad, never your phone number); the post is removed when the ad ends, or sooner if you ask us;
  • with service providers that help us run the site, such as our text-message provider (Twilio), our payment processor (PayPal, which also handles Venmo and Apple Pay payments; PayPal's own privacy statement applies to what it collects) and our hosting provider, only as needed to provide the service. When you tap “Tidy up” or “Rewrite” under your ad's description, the text and details of your ad (without phone numbers, e-mail addresses or links) are sent to our AI provider (Anthropic) to write the suggestion;
  • when required by law or to protect our rights and users.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third parties, except the service providers above that deliver our messages.

5. Cookies

We use only the cookies needed for the site to work and stay secure: a session cookie, a security (CSRF) token, your language choice, the ads you save, and the last area you searched (so the board opens there next time; tap “All areas” to forget it). We do not use advertising or tracking cookies.

6. How long we keep information

  • Ad submissions whose phone number is never confirmed are deleted within about 24 hours.
  • Ads and their contact details are kept while the ad is active and for a reasonable time afterwards so you can renew it. You can ask us to delete them sooner.
  • Consent and opt-out records are kept as long as needed to respect your choices and meet legal requirements.
  • Payment records are kept as long as required for tax and accounting. Saved cards are kept until you remove them or ask us to.

7. Your choices

  • Stop texts at any time by replying STOP, or with the "Stop text reminders" link we send you.
  • Remove a saved card on the payment page (trash icon), or ask our staff to remove it.
  • Ask us to see, correct or delete your information, or to remove your ad, by contacting us below.

8. Security

We protect information with encrypted connections (HTTPS), restricted staff access and activity logs. No method is 100% secure, but we work to protect your information.

9. Children

This site is for adults and businesses. It is not directed to children under 13, and we do not knowingly collect their information.

10. Changes

We may update this policy. The date at the top shows when it last changed. Important changes will be posted on this page.

Contact us