Privacy Policy

This page explains what TweetSpool collects, why, and what you can do about it. We collect as little as we can to run the product.

What we collect

• Account: your email address and sign-in details, handled by Supabase Auth.
• Your drafts: thread titles, post text, schedule times and posting status.
• X connection: your X user id, @handle, display name and avatar URL, plus the OAuth tokens X gives us. Tokens are encrypted in Supabase Vault and are only readable by our server, never by the browser.
• Usage: how many posts and link posts you sent this period, to enforce plan limits.
• Billing: your Whop membership id, plan and status. Card details go to Whop, not to us.

What we do not do

• We do not sell your data or share it for advertising.
• We do not read your X timeline, DMs or followers, and we do not post anything you did not write and send or schedule.
• We do not use your drafts to train AI models.

Who processes it

• Supabase (database, sign-in, server functions) stores the data above.
• X Corp. receives your posts when you send them, under X's own privacy policy.
• Whop handles checkout and subscriptions, under Whop's own privacy policy.
• GoDaddy hosts the website files.

How long we keep it

Drafts and posting history stay until you delete them or your account. Disconnecting X deletes the stored X tokens immediately. Deleting your account deletes your drafts, usage and tokens; billing records may be kept by Whop as required by law.

Your choices

You can view and delete your drafts in the app, disconnect X at any time, and ask us to export or delete everything we hold about you by messaging the TweetSpool store on Whop.

Cookies

TweetSpool uses only what is needed to keep you signed in (browser local storage). There are no advertising or tracking cookies.

Changes

If this policy changes in a meaningful way we will tell you in the app before the change applies.