Privacy Policy

Last updated: August 10, 2026

1. What We Collect

When you use Sent2X, we collect:

  • Account information — your name, X handle, and profile image when you sign in with X (OAuth). Legacy accounts may also have an email address on file.
  • X account data — your X handle and OAuth tokens, used solely to publish posts on your behalf.
  • Content you create — the posts you write, schedule, and publish through Sent2X.
  • Payment information — your credit card details are collected and processed directly by Stripe. We never see or store your full card number.
  • Usage data — basic logs for security monitoring and service improvement.

2. How We Use Your Data

  • To provide the Sent2X service — scheduling and publishing posts to your X account.
  • To process payments through Stripe.
  • To communicate with you about your account (transactional emails, service updates).
  • To maintain the security and integrity of our platform.

3. What We Do Not Do

  • We do not sell your personal data to third parties.
  • We do not use your posts or content for advertising or marketing profiling.
  • We do not share your X account credentials or content with third parties for their own purposes.
  • We do not use your content to train AI models.

4. Data Security

We implement industry-standard security measures:

  • All data is transmitted over TLS/HTTPS.
  • API keys are stored with AES-256-GCM encryption.
  • Payments are processed by Stripe, a PCI DSS Level 1 certified provider.

5. Third-Party Services

We use the following third-party services to operate Sent2X:

  • Stripe — payment processing. Stripe processes only the minimum data necessary for transactions.
  • Vercel — hosting and deployment. Vercel processes server logs and request data.
  • Neon (PostgreSQL) — database hosting. All user data is stored in an encrypted database.
  • Resend — transactional email delivery (receipts and account notices).
  • DeepSeek — AI generation. When you use an AI feature (replies, discovery ranking, remix, planner, translate), the content that feature needs — the public post involved, your draft, your saved instructions and public post samples — is sent to DeepSeek's API to produce the output. See our AI Disclosure for details.
  • X (Twitter) API — publishing and analytics. Posts you schedule are sent to X to be published on your account; engagement metrics are read back to power analytics.

6. Data Retention and Deletion

We retain your data as long as your account is active. If you delete your account:

  • Your profile, posts, and scheduled content are permanently deleted.
  • Stripe retains payment records as required by financial regulations.
  • To request account deletion, contact us at the email below.

7. Your Rights

You have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Export your posts and content.
  • Withdraw consent where processing is based on consent.

To exercise these rights, contact us at the email below. We will respond within 30 days.

8. International Users

Sent2X is operated from the United States. By using our service, you consent to your data being transferred to and processed in the United States. We comply with applicable data protection laws including GDPR for European residents and CCPA for California residents. We do not sell personal information.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of Sent2X after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, contact us at support@sent2x.com.