← Back to home

Privacy Policy

Last updated: February 2026

1. What we collect

When you use XPilot, we collect the following information:

  • Account information including your email address and X (Twitter) profile data provided through OAuth.
  • X API data including your tweets, analytics, and engagement metrics, used to generate and optimize your content.
  • Chat messages you send to XPilot during onboarding and editing, used to learn your voice and preferences.
  • Usage data such as pages visited and features used, collected through standard analytics.
  • Payment information processed securely through Stripe. We never store your card details directly.

2. How we use your data

  • To generate, schedule, and post content on your behalf through the X API.
  • To analyze your tweet performance and adapt your content strategy.
  • To provide weekly insights and briefings.
  • To process payments and manage your subscription.
  • To send transactional emails related to your account and trial.
  • To improve XPilot and fix bugs.

3. Data sharing

We do not sell your data. We share data only with trusted third-party services required to operate XPilot, including providers for hosting, payment processing, email delivery, AI content generation, and the X API for posting and analytics.

4. Data retention

We retain your data for as long as your account is active. If you cancel your subscription and request deletion, we will remove your data within 30 days. Analytics and generated content are deleted along with your account.

5. Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication (OAuth 2.0), and encrypted database storage. Your X API tokens are stored encrypted and never exposed.

6. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the product is used. No advertising cookies are used.

7. Your rights

You can request to:

  • Access the data we hold about you.
  • Delete your account and all associated data.
  • Revoke X API access at any time through your X settings.
  • Export your generated content.

8. Contact

For any privacy-related questions, contact us at @alexcloudstar on X.

9. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of XPilot after changes constitutes acceptance.