Privacy Policy

Information we collect

We collect only what we need to run the Service:

• Account information. When you create an account or sign in, we collect identifiers such as your name, email address, and the identifier provided by your sign-in method.
• X account data. If you connect your X (formerly Twitter) account, you authorize us, through X’s official sign-in, to access information needed to provide the Service, such as your public profile, your posts, and engagement metrics. We do not receive your X password.
• Content you provide. Drafts, prompts, settings, and anything else you enter into the Service.
• Billing information. If you purchase a paid plan, payments are handled by a third-party payment processor. We receive limited details such as your plan and payment status, but we do not store your full card number.
• Usage and device data. Basic technical information your browser sends automatically, such as approximate location, device and browser type, and how you interact with the Service, collected to keep it secure and working.
• Browser extension data. If you use the Xpert browser extension, the information described under Browser extension below.

How we use information

• To provide, operate, and maintain the Service.
• To draft, schedule, analyze, and publish content at your direction.
• To process payments and manage your account and plan.
• To respond to your requests and provide support.
• To monitor, secure, debug, and improve the Service.
• To comply with law and enforce our Terms of Service.

How we share information

We do not sell your personal information. We share it only as needed to run the Service:

• Service providers. Reputable third parties that provide hosting, infrastructure, payment processing, and similar functions, acting on our behalf and bound to protect your information.
• X. When you connect your X account and direct us to act, the relevant content is sent to X to carry out your request.
• Legal and safety. Where we reasonably believe disclosure is required by law or necessary to protect rights, safety, or the integrity of the Service.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

Connecting your X account

X is a separate platform operated by X Corp. Your use of X is governed by X’s own terms and privacy policy, which you should review. We are not responsible for X’s practices, and we cannot control how X handles data once it is on its platform. You can disconnect your X account at any time from your account settings or by revoking access within X.

Browser extension

The Xpert extension for Chrome and other Chromium browsers brings the Service into your browser: the Xpert app in the browser’s side panel, and buttons, panels and badges on x.com. It works only once you sign in to Xpert, through Xpert’s own sign-in (it never sees your X password), on a plan that includes it. Here is what it reads, what leaves your browser, and why:

• On x.com. The extension runs on x.com and twitter.com pages to show its buttons, panels and badges, and it reads the posts and profiles shown there. When you ask it to draft a reply, quote or remix, rewrite a draft or check one, it sends us the post, its author, the addresses of its images and the conversation around it, with anything you type. While AI Shield is on (it is on by default, and you can switch it off from the extension’s menu in the browser toolbar), it sends us the id, text and author handle of replies and mentions as they appear on screen, so we can estimate how likely each one is to be written by AI or posted by an automated account. Your own posts are never sent for this, and we keep only the estimate, for up to seven days. On a profile, the profile lens sends us the profile’s handle so it can show how that account relates to yours.
• In the side panel. The panel reads the address and title of the browser tab beside it, to offer a card that fits the page. On an X post or profile it may ask us about that post or handle to fill in the card. Anything about another page is sent to us only when you ask (see Turning a page into posts). Otherwise the panel works like the web app and sends what you enter or ask for.
• Turning a page into posts. When you choose Turn this page into posts, in the side panel or from the page’s right-click menu, the extension reads that page in your browser: its text, title, author and site name, a few of its pictures, and a screenshot of what is on screen when your browser allows one. The first time you do this on a site you didn’t open Xpert from, your browser asks whether Xpert may read that site. We receive the page’s address, text, title, author and site name to write your drafts, and only the pictures you pick, which we store with your account so they can go on your drafts. The extension reads no page you haven’t asked it to.
• Learning mode. If you turn on Learning mode in Settings (it is off unless you do), the side panel, like the web app, records which features you use, the screens you open and text you write in Xpert, to personalise suggestions. You can turn it off and clear what it learned at any time.
• Stored in your browser. The extension keeps its sign-in tokens, your settings (such as the X account it acts as and whether AI Shield is on) and up to a week of AI Shield results in the browser’s storage for the extension. Signing out removes the tokens, and removing the extension removes all of it.
• Clipboard and one-click fill. The extension writes to your clipboard to copy a draft you asked it to copy, or so you can paste a draft into x.com. It reads your clipboard only if you turn on one-click fill from the side panel’s account menu, which asks your browser for that permission, and then only to paste the draft it has just copied into the reply or post box on x.com. One-click fill is off unless you turn it on.
• What it does not do. The extension never posts, replies, likes, reposts or follows on its own. Replies and quotes go out from x.com when you press Reply or Post there. A post, thread or article you write in the side panel is published or scheduled only when you press Publish or Schedule, the same as in the web app. It reads another website’s content only when you turn that page into posts, it does not collect your browsing history, and it shows no ads.

We use what the extension sends only to provide the features you use and to keep the Service secure. To write drafts and run AI Shield we pass the text each request needs to the AI model providers that act as our service providers. We do not sell this information or use it for advertising, and we keep it on the same terms as the rest of your account (see Data retention).

Cookies

We use cookies and similar technologies that are necessary to sign you in, keep your session secure, and remember your preferences. You can control cookies through your browser, though some features may not work without them.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or anonymize it.

Security

We take reasonable measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can exercise these rights, or delete your account, by contacting us at contact@xpert.so. We will respond as required by applicable law.

International users

The Service may be operated from, and your information processed in, countries other than the one in which you live. Those countries may have different data protection rules. By using the Service, you consent to this processing.

Children

The Service is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the date above. Changes are effective when posted, and your continued use of the Service means you accept the updated Policy.

Contact

Questions about this Policy or your information? Email us at contact@xpert.so.