Privacy Policy

Last updated: February 22, 2026

1. What We Collect

When you use SocialPilot, we collect:

Email address (for authentication and account management)
X (Twitter) API keys you provide (stored encrypted, used only for authorized actions)
Usage data (posts scraped, replies generated, engagement metrics)
Basic analytics (page visits, feature usage, device type, browser)
IP address (for rate limiting free tools and security)
Payment information (processed securely by Stripe; we never store card numbers)

2. How We Use Your Data

Your data is used exclusively to provide the SocialPilot service: finding relevant posts, generating AI replies, tracking engagement, and improving the product. We do not sell, share, or use your data for advertising.

3. API Keys

Your X API keys are stored securely and used only to authenticate requests on your behalf. We never share your keys with third parties. You can revoke access at any time by removing your API keys from your account settings.

4. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand how visitors interact with our free tools. No third-party advertising cookies are used.

Session cookie (PHPSESSID), maintains your login session
Analytics, anonymous page view and tool usage tracking

5. Third-Party Services

We use the following third-party services to operate SocialPilot:

Stripe, payment processing (Stripe Privacy Policy)
Google, OAuth authentication (Google Privacy Policy)
Resend, transactional emails (magic link login, billing notifications)
X (Twitter) API, post scraping and reply posting on your behalf

6. Data Retention

Your data is retained as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days. After 30 days of inactivity, we may archive your data. You can request full data deletion at any time.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

Access, request a copy of all personal data we hold about you
Rectification, request correction of inaccurate data
Erasure, request deletion of your personal data ("right to be forgotten")
Portability, request your data in a machine-readable format
Restriction, request we limit processing of your data
Objection, object to processing of your data

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure password hashing, encrypted API key storage, and regular security reviews. No system is 100% secure, and we cannot guarantee absolute security.

9. Children

SocialPilot is not intended for use by anyone under 16 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of the service after changes constitutes acceptance.

11. Data Protection Contact

For privacy-related questions, data access requests, or concerns about how we handle your data, contact us at [email protected].