Privacy Policy

Introduction

TweetAgent (“TweetAgent,” “we,” “our,” or “us”) provides an AI-powered Twitter/X engagement automation desktop application (“Services”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

TweetAgent is a desktop application that runs on your computer. It uses a TweetAgent account and our database for the data described below. Your app AI key is stored only on your device and is sent only to your AI provider. Your Twitter/X password is never sent to us.

Information We Collect

1. Account Information

When you create a TweetAgent account, we collect:

• Email address
• Password (hashed, never stored in plaintext)

This information is stored in our database (hosted on Supabase) for authentication purposes.

2. Account Configuration Data

When you add Twitter/X accounts to TweetAgent, we store:

• Your Twitter/X username (for display purposes only)
• Persona text (your AI personality configuration)
• Schedule preferences (automation timing settings)
• Account settings (premium status, optional fixed proxy)

3. Activity Data

When automation flows run, we log:

• Flow type (reply, post, take, follow)
• Timestamps and duration
• AI model used and cost
• Engagement records (usernames interacted with, tweet text, reply text)
• Error messages (if flows fail)

This data is stored in our database to power the activity feed and help you monitor your automation.

4. What We Do NOT Collect

TweetAgent does NOT collect or store in our database:

• Your Twitter/X password (you log in to X in the protected browser TweetAgent runs on your device — we never see your password)
• Your app AI key for OpenAI, Anthropic or OpenRouter (encrypted on your device with the macOS Keychain and sent only to that provider, never to our database)
• Browser cookies or session data

How Your API Keys Are Handled

Your app AI key (OpenAI, Anthropic or OpenRouter) is:

1. Entered by you in the app
2. Encrypted using your operating system's secure storage (macOS Keychain via Electron safeStorage)
3. Stored in a file on your device, not in our database
4. Decrypted only on your local device when running automation flows
5. Sent directly from your device to your AI provider — never routed through TweetAgent servers

Your PostBridge API key (optional, used only to publish posts and takes), and any per-account Anthropic key saved by an earlier version of TweetAgent, are stored in our database with your account. They are protected by sign-in, row-level security, encryption at rest and HTTPS, and are sent from your device directly to PostBridge or Anthropic when used.

How We Use Your Information

We use collected information to:

• Authenticate you and manage your account
• Store your automation configuration and preferences
• Display your activity history and engagement analytics
• Diagnose errors and improve the service

We do NOT use your information to:

• Train AI models
• Sell to third parties
• Send marketing communications (unless you opt in)
• Profile you for advertising

Data Storage and Security

• Account and activity data is stored on Supabase (PostgreSQL database) with row-level security
• Your app AI key is encrypted using OS-level encryption on your device; keys stored with your account are protected by sign-in, row-level security, encryption at rest and HTTPS
• Database access is restricted to authenticated users who can only access their own data
• We use HTTPS for all data transmission

Third-Party Services

TweetAgent integrates with:

Your device communicates directly with your AI provider, PostBridge, and Twitter/X. TweetAgent does not act as an intermediary for these communications.

Data Retention

• Account data is retained as long as your account exists
• Activity logs are retained indefinitely for your reference
• Upon account deletion, all associated data is permanently removed

Your Rights

You have the right to:

• Access your data through the app's activity feed and settings
• Update your account information, personas, and preferences at any time
• Delete your account and all associated data
• Export your activity data (feature planned)

Children's Privacy

TweetAgent is not intended for use by anyone under 18 years of age. We do not knowingly collect information from children under 18.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)

International Data

Our database is hosted in the United States via Supabase. By using TweetAgent, you consent to the transfer and processing of your data in the United States.

Changes to This Policy

We will notify you of material changes to this Privacy Policy by:

• Updating the “Last updated” date at the top
• Displaying a notice in the app

Contact

For privacy-related questions or requests:

Email: support@tweetagent.ai

Website: https://tweetagent.ai