Privacy Policy

Last updated:

1. What We Collect

When you use Sent2X, we collect:

  • Account information — your name, X handle, and profile image when you sign in with X (OAuth). Legacy accounts may also have an email address on file.
  • X account data — your X handle and OAuth tokens, used solely to publish posts on your behalf.
  • Content you create — the posts you write, schedule, and publish through Sent2X, and the replies you draft with it.
  • Context for AI replies — when you ask the extension or dashboard to draft a reply, the post you are answering and its surroundings (see section 3a).
  • Payment information — your credit card details are collected and processed directly by Stripe. We never see or store your full card number.
  • Usage data — basic logs for security monitoring and service improvement.

2. How We Use Your Data

  • To provide the Sent2X service — scheduling and publishing posts to your X account.
  • To process payments through Stripe.
  • To communicate with you about your account (transactional emails, service updates).
  • To maintain the security and integrity of our platform.

3. What We Do Not Do

  • We do not sell your personal data to third parties.
  • We do not use your posts or content for advertising or marketing profiling.
  • We do not share your X account credentials or content with third parties for their own purposes.
  • We do not use your content to train AI models.

3a. The Browser Extension

The Sent2X Chrome extension adds a reply button to X's own compose box. To draft a reply it needs to know what you are replying to, so when — and only when — you click one of its buttons (the pen, a quick reply, voice, or translate) it reads the following from the page X has already rendered on your screen:

  • The post you are replying to — its text and the author's handle.
  • The thread around it — the parent post(s) above it and, on a status page, the posts that form the conversation, so the reply fits the discussion.
  • A quoted post — when the post is a quote-tweet, the text and author of the post being quoted.
  • Other people's replies already under that post — up to 20 of them, with each reply's text, author name and like count. These are used only to gauge how long, casual, or emoji-heavy replies in that thread tend to be. Their text is not fed back as content to imitate.
  • Image descriptions — the alt text an author wrote for attached images (up to four), and how many images or videos are attached, so the model knows there is a picture it cannot see.
  • What you typed or said — any thoughts you added, and the transcript of a voice note.

This information is sent to Sent2X's servers over HTTPS together with your session, passed to the AI provider to draft the reply, and returned to you. It is not read in the background, not collected while you browse, and not uploaded until you press a button. The extension does not request access to any site other than x.com / twitter.com and sent2x.com.

Retention.We do not build a store of other people's posts from extension traffic. Third-party text (the post, thread, quoted post, and other replies) is held for the duration of the request and in short-lived server logs used for debugging and abuse prevention. The reply you send, together with the post it answered, may be kept in your own reply history so you can see what you responded to; you can delete that history from your dashboard or by asking us.

Hiding an account. The extension adds a Hidebutton to X's profile hover cards and follow lists. Using it records that handle in your browser's own storage — on x.com, and mirrored into the Sent2X panel so Discovery stops surfacing that account's posts. The handle itself is not sent to our servers; what reaches them is only a note that a Discovery card you had already fetched was skipped. Clearing site data for x.com and sent2x.com removes the list.

Voice input.The microphone button uses your browser's built-in speech recognition (the Web Speech API). Sent2X never receives audio — only the finished text. Be aware that in Google Chrome this engine may send the audio to Google's servers for transcription under Google's privacy policy; if you would rather it did not, type instead of speaking.

4. Data Security

We implement industry-standard security measures:

  • All data is transmitted over TLS/HTTPS.
  • API keys are stored with AES-256-GCM encryption.
  • Payments are processed by Stripe, a PCI DSS Level 1 certified provider.

5. Third-Party Services

We use the following third-party services to operate Sent2X:

  • Stripe — payment processing. Stripe processes only the minimum data necessary for transactions.
  • Vercel — hosting and deployment. Vercel processes server logs and request data.
  • Neon (PostgreSQL) — database hosting. All user data is stored in an encrypted database.
  • Resend — transactional email delivery (receipts and account notices).
  • DeepSeek — AI generation. When you use an AI feature (replies, discovery ranking, remix, planner, translate), the content that feature needs — the public post involved, your draft, your saved instructions and public post samples — is sent to DeepSeek's API to produce the output. See our AI Disclosure for details.
  • X (Twitter) API — publishing and analytics. Posts you schedule are sent to X to be published on your account; engagement metrics are read back to power analytics.

6. Data Retention and Deletion

We retain your data as long as your account is active. If you delete your account:

  • Your profile, posts, and scheduled content are permanently deleted.
  • Stripe retains payment records as required by financial regulations.
  • To request account deletion, contact us at the email below.

7. Your Rights

You have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Export your posts and content.
  • Withdraw consent where processing is based on consent.

To exercise these rights, contact us at the email below. We will respond within 30 days.

8. International Users

Sent2X is operated from the United States. By using our service, you consent to your data being transferred to and processed in the United States. We comply with applicable data protection laws including GDPR for European residents and CCPA for California residents. We do not sell personal information.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of Sent2X after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, contact us at [email protected].