TwitKit Privacy Policy

1. Data we collect

• Account data: Email address and authentication details managed by Supabase when you sign in.
• User settings: X (Twitter) handle and user ID, tone preferences, niche mappings (keywords for categorization), mood instructions (custom prompts for different moods), daily reply goals, drafts per post settings, timezone, and your TwitKit authentication token stored securely in our database.
• Extension preferences: Tone, mood, blocked keywords, TwitKit token, and reply goal settings stored locally in your browser to keep the extension panel personalized. These preferences are not sent to our servers except when you explicitly save settings through the dashboard.
• Reply activity: The full text of replies you post through TwitKit, engagement metrics (likes, replies, reposts, quotes) on both your replies and the original posts, niche categorizations, timestamps, reply character counts, and reply tweet IDs so the dashboard can display analytics. We store vector embeddings (mathematical representations) of your reply text to enable AI-powered personalization. We hash original tweet identifiers using HMAC-SHA256 and never store raw tweet IDs or third-party post content.
• Payment data: Stripe processes payments on our behalf. We receive confirmation of your purchase (Stripe customer ID, payment status, subscription tier, trial start dates) but never see full card details or payment card numbers.
• Support messages: If you contact us via email or through the dashboard, we keep the correspondence necessary to respond and improve our service.
• Usage analytics: Aggregated, anonymized data about feature usage, extension interactions, and service performance to help us improve TwitKit. This does not include personal information or reply text.

2. How we use your data

• Authenticate you and secure your TwitKit account across the extension and dashboard.
• Generate AI-assisted reply drafts (TwitPly) and content remixes (TwitMix) personalized to your writing style using embeddings and your settings.
• Store and analyze your reply history to power analytics features including niche breakdown, engagement tracking, insights, and activity timelines in the dashboard.
• Maintain and personalize the extension experience, including mood-specific instructions, niche detection, and paywall enforcement based on your subscription status.
• Provide customer support, respond to inquiries, and communicate important product updates, security notices, and billing information.
• Comply with legal obligations, respond to lawful requests, and protect our rights and the security of our service.
• Improve TwitKit through aggregated, anonymized usage analytics and feedback analysis.

3. AI processing & embeddings

To provide personalized reply drafts and remixes, we use OpenAI's services to process your reply text and generate vector embeddings. Embeddings are mathematical representations of your writing style that enable AI to learn your tone, phrasing, and patterns. Your reply text and embeddings are sent to OpenAI for processing but are stored securely in our database. We do not use your data to train OpenAI's general models. You can control this by adjusting your settings or deleting your reply history.

4. Sharing & retention

We do not sell or rent your personal information. We only share limited data with trusted processors who help us run TwitKit:

• Supabase: Authentication, database storage, and user management.
• Stripe: Payment processing and subscription management.
• OpenAI: AI-powered reply generation and embedding creation.

Each processor is bound by contract and their own privacy policies to protect your data. We retain your reply history, analytics, and settings until you delete your account or request removal. Upon account deletion, we permanently remove all associated data within 30 days, except where we are legally required to retain certain information.

5. Data security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encryption at rest for sensitive data, hashed identifiers for tweets and authors, and secure authentication tokens. Your TwitKit token is generated server-side and never exposed in browser storage or logs. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your choices & rights

• Access: View and export your reply history, analytics, and settings from the dashboard at any time.
• Update: Adjust your settings, tone preferences, niche mappings, mood instructions, and other preferences from the Settings page.
• Token management: View, copy, or regenerate your TwitKit token at any time from the dashboard.
• Deletion: Request deletion of your account and all associated data by contacting privacy@chamsdel.online. We will process deletion requests within 30 days.
• Extension control: Disable or uninstall the Chrome extension at any time if you no longer want it to access X pages.
• Email preferences: Opt out of marketing emails by using the unsubscribe link; transactional emails (receipts, security notices, account updates) cannot be disabled as they are required for service operation.
• Export: Request a copy of your data in a machine-readable format by contacting support.

7. Children's privacy

TwitKit is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately and we will delete such information.

8. International transfers

TwitKit is operated from the United States. By using the service, you consent to processing and storage in the U.S. and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws, including standard contractual clauses where required.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the new effective date above and notify active users via email or dashboard notification when material changes occur. Continued use of TwitKit after changes constitutes acceptance of the updated policy.

10. Contact

Have privacy questions, requests, or concerns? Email privacy@chamsdel.online or support@chamsdel.online and we'll respond promptly.