Privacy Policy

This Policy explains how My X Automator collects, uses, stores and shares information when you create an account, connect X or use the Service.

• Account information such as your name, email address, account status and sign-in dates.
• X connection information such as your X user ID, username, authorization tokens and connection health. We never ask for or store your X password.
• Content and settings you provide, including drafts, scheduled posts, media references, links, campaign rules and message text.
• Service records such as publishing results, errors, estimated API usage and security or diagnostic events.

We use information to authenticate you, connect the X account you approve, perform the actions you request, run scheduled jobs, display your activity and usage, prevent abuse, diagnose failures, secure the Service and communicate important account information.

The Service accesses X only through permissions you approve. Authorization tokens are stored in encrypted form on the server and are not displayed in the browser or owner dashboard. You can revoke the connection through the Service or your X account settings. X’s own privacy policy and terms also govern information handled by X.

Supabase provides authentication, database and file-storage infrastructure. Hosting and deployment providers process the data needed to operate the website. X processes publishing, account and engagement requests. We do not sell personal information. We may disclose information when required by law, to protect users or the Service, or during a business transfer subject to appropriate safeguards.

We retain account information while your account is active and retain operational records only as reasonably needed for the purposes above, security, dispute handling and legal obligations. Disconnecting X removes your personal X access and refresh tokens and pauses X-dependent activity, but does not delete your Service account, drafts, schedules or campaign settings.

You can request permanent deletion of your account at any time from the Account page. Requesting deletion immediately pauses all publishing, automatic messages, reposts and other background activity on your account and schedules the account for permanent deletion after a short cancellation period (currently 7 days), during which you may sign in and cancel the request. Once that period ends, we permanently delete your profile, X connection and personal tokens, drafts, scheduled and published post records, threads, campaigns, automatic-message history, automatic-repost rules, images stored for your posts, usage history, notifications, subscription records, onboarding data and your account-specific job history, and we attempt to revoke your X authorization with X.

A limited backup copy of the database, kept only for disaster-recovery purposes, may still contain deleted information for a short additional period until that backup is itself rotated out, and some records may be retained longer where required by law, for security investigations, or to resolve a dispute.

We use access controls, owner-only administration, encrypted connections and server-side secret storage. No online system is completely secure, so you should use a strong unique password and promptly report suspicious activity.

You may review or change many settings in the Service, disconnect X, and download a copy of your own data (profile, posts, campaigns, message history, usage and settings — never passwords, encrypted tokens, or another user's information) at any time from the Account page. You may also request permanent deletion of your account from the same page, subject to the cancellation period described above. Depending on where you live, additional legal rights may apply. Sensitive account actions such as changing your password or requesting deletion require you to re-enter your current password, and we may need to further verify your identity before completing a request made by other means.

The Service is not intended for children under 13, or under the higher minimum age required where they live. We do not knowingly collect personal information from children.

Service providers may process information in countries other than your own. Where required, appropriate safeguards will be used for international transfers.

We may update this Policy as the Service changes and will revise the effective date. Privacy questions and requests can be sent to webstorewhiz90@gmail.com.