Privacy Policy

This Privacy Policy applies to all information collected through the Tweetomate platform, including:

• check_circleOur website at tweetomate.com
• check_circleOur application at app.tweetomate.com
• check_circleAny related mobile applications or integrations

By accessing and using Tweetomate, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

• check_circleAccount Registration: Name, email address, password, and optional profile information.
• check_circleX Account Connection: X username, account ID, and OAuth tokens via X API v2 (stored encrypted).
• check_circlePayment Information: Billing name, address, and payment details (processed securely by Stripe; we do not store full card numbers).
• check_circleContent & Settings: AI profile data, content preferences, publishing schedules, and AI boundaries you configure.
• check_circleSupport Communications: Messages, emails, and feedback you send to our support team.

• check_circleUsage Data: IP address, browser type, operating system, referring URL, pages visited, and time spent.
• check_circleDevice Information: Device ID, device type, and unique identifiers.
• check_circleCookies & Tracking: Session cookies, analytics cookies, and similar tracking technologies (see Section 8).
• check_circleLog Data: Server logs containing access times, error messages, and activity details.

We use collected information for the following purposes:

• check_circleService Delivery: Provide, maintain, and improve the Tweetomate platform.
• check_circleAccount Management: Create and manage your account, process payments, and handle subscription changes.
• check_circleAI Content Generation: Process your profile data and content preferences to generate personalized AI tweets and threads.
• check_circleX Integration: Authenticate with X via OAuth tokens to publish content and fetch metrics on your behalf.
• check_circleCommunication: Send transactional emails (receipts, password resets, security alerts) and optional marketing emails (with your consent).
• check_circleAnalytics & Improvement: Analyze usage patterns to improve our platform, features, and user experience.
• check_circleLegal Compliance: Fulfill legal obligations, enforce our Terms of Service, and protect against fraud or abuse.
• check_circleSupport & Troubleshooting: Address technical issues, respond to inquiries, and provide customer support.

We do not sell your personal data. However, we share data with trusted service providers necessary to operate the Service:

• check_circleStripe: Payment processing and subscription management (card data never directly stored by us).
• check_circleOpenAI: AI content generation and image creation (your profile data and AI queries are sent to OpenAI).
• check_circleX Corp: OAuth authentication and content publishing via X API v2.
• check_circleBrevo (Sendinblue): Transactional email delivery (email address and message content).
• check_circleDigitalOcean: Cloud hosting for data storage and server infrastructure.

We may disclose your information if required by law, court order, or government request. We may also disclose it to:

• check_circleEnforce our Terms of Service or other agreements
• check_circleProtect the safety, rights, and property of Tweetomate, our users, or the public
• check_circleDetect, prevent, or address fraud, security, or technical issues

We implement industry-standard security measures to protect your personal information:

• check_circleEncryption in Transit: All data transmitted via HTTPS/TLS 1.2 or higher.
• check_circleEncryption at Rest: Sensitive data (passwords, OAuth tokens, payment info) encrypted using AES-256 or equivalent.
• check_circleAccess Control: Passwords hashed using bcrypt; employee access to personal data is restricted and logged.
• check_circleRegular Audits: Security testing and vulnerability assessments performed regularly.
• check_circleIncident Response: We monitor for and respond to unauthorized access attempts.

Depending on your location, you may have the following rights:

You have the right to request access to your personal data and receive it in a portable format.

You may update or delete your account information at any time through your account settings. To request complete data deletion, contact us at privacy@tweetomate.com or via our contact page.

You may opt out of marketing emails by clicking the "Unsubscribe" link in any marketing email or adjusting your notification settings. Transactional emails (receipts, alerts) cannot be opted out of.

You can manage cookies through your browser settings. Some features may not function properly if cookies are disabled.

• check_circleEU Residents (GDPR): Right to access, rectify, erase, restrict processing, data portability, and object to processing.
• check_circleCalifornia Residents (CCPA): Right to know, delete, opt-out of sale, and non-discrimination for exercising rights.

To exercise these rights, contact us at privacy@tweetomate.com or through our contact page.

We retain your data for as long as necessary to provide the Service and fulfill legal obligations:

• check_circleActive Accounts: Data retained while your account is active.
• check_circleAfter Deletion: Personal data permanently deleted within 90 days of account closure (backup copies retained for up to 6 months for recovery purposes).
• check_circleLegal Requirements: Data retained as required by law (e.g., tax records, fraud prevention) for 7 years in some cases.
• check_circleAnalytics Data: Aggregated usage data retained indefinitely for service improvement.

Cookies are small text files stored on your device. We use the following types:

• check_circleSession management and authentication
• check_circleCSRF protection and security tokens
• check_circleThese cannot be disabled without breaking the Service

• check_circleGoogle Analytics for usage insights
• check_circleError tracking and performance monitoring
• check_circleYou can opt out via browser settings or Google's opt-out extension

• check_circleRetargeting pixels for ads on third-party sites
• check_circleYou can opt out or adjust preferences in your browser

Tweetomate is not intended for users under the age of 18. We do not knowingly collect personal information from children under 13 (or the applicable age of digital consent in your jurisdiction).

If we become aware that a child has provided us with personal information, we will immediately delete such information and terminate the child's account. If you believe a child has provided us with information, please contact us at privacy@tweetomate.com.

Your information may be processed and stored in countries outside your country of residence, including the United States. These countries may have data protection laws different from your home country.

By using Tweetomate, you consent to the transfer of your information internationally. For EU residents, we rely on Standard Contractual Clauses and other mechanisms approved by the European Commission to ensure adequate protection.

If you have questions about this Privacy Policy or our data practices, please reach out by email or through our contact page — whichever is easier for you:

We aim to respond to privacy requests within 30 days. If you are dissatisfied with our response, you may file a complaint with your local data protection authority.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of Tweetomate after changes become effective constitutes your acceptance of the updated Privacy Policy.

Last updated: July 23, 2026 | Effective date: June 1, 2026