Privacy Policy
Effective October 1, 2026 · updated October 1, 2026 to add Google Analytics
- We collect what GrowTweet needs to work for your X account, and nothing for advertising.
- We don't sell your data or use advertising trackers. We use Google Analytics, with your consent where the law requires it, to see how GrowTweet is used.
- Your X access tokens are stored encrypted, and Stripe handles your card. We never see the card number.
- You can disconnect X at any time and ask us to delete your data.
1. Who is responsible
GrowTweet (growtweet.space) is operated by Samirts, which is responsible for your personal data under this policy. Contact: a DM to @UiShahinAlam on X.
2. What we collect
When you sign in with X
- Your X account ID, username, display name, profile image and verification type (for example whether you have Premium).
- Your email address, if X shares it with us.
- The access and refresh tokens X gives us, and the permissions you approved, such as reading, posting, uploading media, and DMs if you allowed them. Tokens are stored encrypted.
From your X account, to make GrowTweet work
- Your recent posts and their public numbers (likes, replies, reposts, views), to learn your voice and show your growth.
- Your follower count, and a sample of your followers' public profiles (such as location and bio) to find your audience and your best posting times.
- For Auto DM, if you turn it on: the replies to your posts that contain your keyword, and the X IDs of the people messaged, so nobody gets a DM twice.
What you create or set in GrowTweet
- Your voice settings, custom and reply instructions, niche keywords, target accounts and posting schedule.
- Drafts, scheduled and published posts, and images you upload. Uploaded images are stored at a public web address so they can be attached to posts on X.
- Products you add (name, description, link) and a short summary of your product's website, which GrowTweet reads to find better opportunities.
- Opportunity Finder settings and results, and saved or dismissed posts.
- Replies you open in X from GrowTweet, including their text, which we keep to check your pace and avoid near-identical replies that X treats as spam.
- Automation settings and their results.
Billing
- Your plan, trial and renewal dates, and the Stripe customer and subscription IDs. Card details are handled by Stripe and never stored by GrowTweet.
Technical
- Your browser stores your sign-in session and a few preferences in local storage, so you stay signed in.
- Google Analytics measures how the site and app are used: pages viewed, device and browser, approximate location (country/city), how you arrived, and key actions such as starting a trial, signing in and starting checkout. It uses cookies. In the EEA, UK and Switzerland it only runs if you click Accept; everywhere else you can switch it off with Decline. Advertising features are turned off, and we don't send Google your name, email, X username or post content.
- Our hosting and database providers keep standard server logs (such as IP address and request time) for security and reliability.
3. Public posts from other people
To show what is working in your niche, find opportunities and track trends, GrowTweet reads public posts and public profile details from X (text, username, display name, profile image, follower count and engagement numbers). We use them only to provide those features and keep them only as long as needed.
4. How we use your data
- To run GrowTweet: drafting posts and replies in your voice, scheduling and publishing what you approve, running automations you turn on, finding opportunities and showing analytics.
- To keep your account safe: pacing limits, spam checks and plan limits.
- To bill you and manage your subscription.
- To fix problems, prevent abuse and keep the Service secure.
We don't sell your data, use it for advertising, or share it with data brokers.
5. Who processes your data
We use these service providers to run GrowTweet. They process data on our behalf and only as needed:
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Database, sign-in, image storage, server code | Your account data and content listed above |
| Cloudflare | Website hosting and security | Standard request data (such as IP address) |
| Stripe | Payments and subscriptions | Billing details, card (held by Stripe) |
| X (X Corp.) | Sign-in, publishing, reading your account | Your X account and the actions you approve |
| twitterapi.io | Reading public X posts and profiles | Search terms, account handles |
| Google (Analytics) | Usage measurement | Pages, device, approximate location, key actions (with consent where required) |
| DeepSeek | AI writing and analysis | The text needed to write a draft or score a post (your voice notes, instructions, the post being replied to) |
We may also share data if the law requires it, or to protect the rights and safety of our users or the Service.
6. International transfers
Our providers may process data in countries other than yours, including the United States (Google, Stripe, Cloudflare and others) and China (DeepSeek). We rely on their security commitments and contracts to protect it.
7. How long we keep data
- Account data and content: while your account is active. If you ask us to delete your account, we delete it within 30 days, apart from what we must keep by law.
- Billing records: as long as tax and accounting law requires.
- Reply pace records: about 7 days of history is used. Older records may be deleted.
- Public posts from others: refreshed regularly and removed when no longer needed.
8. Your choices and rights
- Disconnect X: in X, go to Settings, then Security and account access, then Apps and sessions, then Connected apps, and remove GrowTweet. Scheduled posts and automations stop working.
- Cancel billing: Plan & billing, then Manage billing.
- Analytics: choose Accept or Decline in the cookie bar. To change your mind later, clear this site's data in your browser and choose again, or use Google's opt-out add-on.
- Access, correct, export or delete your data: send us a DM (see Contact). Depending on where you live, you may also have the right to object to or restrict processing, and to complain to your data protection authority.
9. Security
Data travels over HTTPS. X tokens are encrypted at rest, database access is restricted, and payments are handled by Stripe. No system is perfectly secure. If a breach affects your data, we'll tell you as the law requires.
10. Children
GrowTweet is not meant for anyone under 16, and we don't knowingly collect their data.
11. Changes to this policy
We'll update this page when our practices change and change the date at the top. If the changes are significant, we'll let you know in the app.
12. Contact
Privacy questions or requests: send a DM to @UiShahinAlam on X.