Privacy Policy

Last updated: October 25, 2026

What we collect

  • Account: email address, username (if set), and an encrypted password; for Google sign-in, only your Google account ID and email.
  • Transactions: orders, membership and licenses, balance history, referral links, commission and creator earnings; the payout method and name you provide when withdrawing.
  • Usage: support tickets and live-chat messages and attachments, and content you save in tools (for example, X Growth Assistant topics and drafts).
  • Analytics: an anonymous visitor identifier (hashed, cannot be turned back into an IP address), pages visited, country and device type.
  • Security: failed sign-in counts and source IP to prevent abuse. Verification codes and sign-in tokens are stored only as hashes.

What stays in your browser

  • Processed locally and never uploaded: videos and audio in Video Subtitles, spreadsheets, and exported images and archives.
  • Sent to our servers for AI processing: custom-build conversations, and content you ask X Growth Assistant to analyze or draft. This content is processed by our cloud AI provider and is not used to train models.
  • AI API keys you enter are stored only in your browser and sent directly to the model provider, never to our servers.

Payments

We record order number, amount and payment method. For USDT we record the public on-chain sender address and transaction ID. We never receive your bank card details or wallet private keys.

Browser extensions

Our extensions work only on the sites they describe (such as X), read the page you are viewing using your own signed-in session, never read passwords, and do not send your login credentials for those sites to us. A connection code links the extension to your account; you can regenerate it at any time. When an extension acts on a third-party platform for you, that platform's rules apply.

Service providers

  • Cloudflare: hosting, database, file storage and cloud AI processing.
  • Resend: verification and notification emails.
  • Google: sign-in, if you choose it.
  • Telegram: notifications, if you connect our bot.
  • Public blockchain nodes: checking USDT payments to our own address.

We do not sell your data.

Cookies

We use only necessary cookies: your sign-in session, the referral source (30 days), and a one-time Google sign-in check. No advertising or cross-site tracking cookies. Language and theme preferences are stored in your browser.

Retention

Account and transaction records are kept while your account exists; after deletion, order and financial records are kept as long as required by financial and legal obligations. Verification codes expire after 10 minutes; sessions after 30 days.

Your rights

You can view your orders, balance and referral records in your account at any time. To delete your account or export your data, use “Request account deletion” in My account → Sign-in & security, or email [email protected]. We process requests within 7 business days; open orders, withdrawals or refunds are settled first.