Privacy Policy

1. What We Collect

• Account information — email address and authentication data when you sign in.
• Uploaded data — the X/Twitter archive ZIP you upload, including liked tweets.
• Processed data — embeddings, classifications, and extracted knowledge generated from your tweets.
• API keys — your AI provider keys, stored encrypted and never shared.
• Usage data — basic analytics like page views and feature usage to improve the product.

2. How We Use Your Data

• Process and classify your liked tweets so you can search and explore them.
• Generate embeddings and knowledge extraction using your chosen AI provider.
• Send transactional emails (processing status, account updates).
• Improve the product based on aggregate usage patterns.

3. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication.
• Stripe — payment processing. We never store your card details.
• Sentry — error tracking to fix bugs faster.
• AI providers (Anthropic, OpenAI, Google) — called with your own API keys to process tweets. Your data is sent to whichever provider you choose.

4. Data Storage & Security

• All data is stored in Supabase with row-level security.
• API keys are encrypted at rest using AES-256-GCM.
• All connections use HTTPS/TLS.
• We do not sell or share your data with third parties for advertising.

5. Your Rights

• Export — download all your data at any time from the dashboard.
• Delete — permanently delete all your data from Settings.
• Access — contact us to request a copy of all data we hold about you.

6. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

7. Changes

We may update this policy from time to time. Significant changes will be communicated via email.

8. Contact

Questions about this policy? Email us at support@xbrain.live