Privacy Policy

Who is responsible

Ryan Lok is the controller of the personal data described here. Contact: support@xeasy.io.

What we collect

Account data: your email address, language, time zone and, if you pay, billing details handled by Stripe (we never see full card numbers).

X data: public information about your X account and the accounts connected to it (followers, following, public posts and their metrics, replies, quotes, reposts and mentions).

Authorisation: OAuth tokens that let us publish on your behalf. They are encrypted at rest and you can revoke them at any time.

Content you create: style profiles, ideas, drafts and replies.

Browser extension: when you use it on x.com, it reads the posts and profiles on the pages you open (their IDs, text and public metrics) and sends them to XEasy with your extension key, to show stats and draft replies. It does not read your DMs, passwords or browsing outside x.com and xeasy.io.

Technical data: error reports (the page, the browser and, if signed in, your user ID) so we can fix problems.

How we use it

To provide the service: detect unfollows, generate drafts and replies, publish what you approve, show analytics and send the emails you asked for (sign-in codes, alerts, weekly reports).

We do not sell personal data, do not use it for advertising, and do not use your data to train AI models. Data from the browser extension is used only to provide its features.

Who processes it for us

twitterapi.io (reading public X data), X Corp (publishing through the official API), the AI model provider you or we configure (currently Google Gemini; may include DeepSeek, Alibaba Qwen or OpenAI), Stripe and its Link service (payments; Link is the merchant of record for most purchases and receives your billing details as the seller), Resend (email), Sentry (error reports), Vercel Web Analytics (page views, without cookies or personal data), Cloudflare Turnstile (spam protection on the free tools), and our hosting providers (Vercel, Neon and our worker host).

These providers may process data outside your country, including in the United States. Where the law requires it, transfers are covered by standard contractual clauses or an equivalent safeguard.

How long we keep it

Full follower snapshots are kept for 7 days. Relationship history and analytics are kept while your account is active. When you delete your account we delete your data within 30 days, except what we must keep for tax and accounting.

Your rights

You can access, correct, export or delete your data, and object to or restrict its processing, by emailing support@xeasy.io. If you are in the EU/UK you may also complain to your data protection authority.

Cookies

We use only the cookies needed to keep you signed in and remember your language. Page views are counted without cookies. No advertising trackers.

Security

Data is encrypted in transit, and X access tokens are also encrypted at rest. Access inside XEasy is limited to what is needed to run and support the service.

Teams

If you join a team, its owner and other members can see the X accounts, drafts and analytics shared with that team. The owner can remove you.

Children

XEasy is not meant for anyone under 18, and we do not knowingly collect their data.

Changes

We will post any update here and email you about material changes before they take effect.