Privacy Policy

What We Collect

• Account and X (Twitter) profile data (username, display name, profile image, user ID)
• Phone number for voice features (to authenticate calls to the AI assistant)
• Encrypted OAuth tokens to post on your behalf
• Voice recordings processed temporarily for transcription (not stored permanently)
• Generated content and drafts you create
• Browser extension context (current page URL and selected text) for suggestions
• Billing metadata from Stripe (plan, invoices). We do not store card numbers

How We Use It

• Provide the service and post content at your request
• Process voice input and create content from it
• Manage subscriptions and payments
• Send important service updates
• Maintain security and comply with law

What We Do Not Do

• We do not sell your personal information
• We do not share your content for advertising

Sharing

• X (Twitter) to publish on your behalf
• Stripe for payments
• Twilio for SMS and phone features
• ElevenLabs for voice processing
• Hosting and storage providers (e.g., AWS, MongoDB Atlas)

Security

• Encryption at rest for sensitive data
• HTTPS everywhere
• Limited access on a need-to-know basis

Retention

• We keep data only as long as needed to run the service
• On account deletion: tokens are revoked, drafts are deleted
• Published posts remain on X per their policies

Extension Permissions

• Active Tab to read page context (for suggestions)
• Storage for preferences and authentication state
• Host permissions for x11.social and x.com
• Microphone for voice input (only when you activate it)

Your Choices

• Access, update, or delete your data
• Export your content
• Revoke X access at any time
• Unsubscribe from emails

International Transfers

Your data may be processed outside your country. We use appropriate safeguards.

Changes

We may update this policy and will change the effective date above.