Privacy Policy

Introduction

TweetAgent (“TweetAgent,” “we,” “our,” or “us”) provides an AI-powered Twitter/X engagement automation desktop application (“Services”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

TweetAgent is a desktop application that runs locally on your computer. We collect minimal data and your sensitive credentials never leave your device.

Information We Collect

1. Account Information

When you create a TweetAgent account, we collect:

• Email address
• Password (hashed, never stored in plaintext)

This information is stored in our database (hosted on Supabase) for authentication purposes.

2. Account Configuration Data

When you add Twitter/X accounts to TweetAgent, we store:

• Your Twitter/X username (for display purposes only)
• Persona text (your AI personality configuration)
• Schedule preferences (automation timing settings)
• Account settings (premium status, Chrome port)

3. Activity Data

When automation flows run, we log:

• Flow type (reply, post, take, follow)
• Timestamps and duration
• AI model used and cost
• Engagement records (usernames interacted with, tweet text, reply text)
• Error messages (if flows fail)

This data is stored in our database to power the activity feed and help you monitor your automation.

4. What We Do NOT Collect

TweetAgent does NOT collect, store, or transmit:

• Your Twitter/X password (you log in via Chrome browser — we never see your password)
• Your Anthropic API key (encrypted locally on your device using OS-level encryption, never sent to our servers)
• Your PostBridge API key (same — encrypted locally, never transmitted)
• Browser cookies or session data
• Screenshots or page content from your browsing
• Content of tweets in your feed (the AI agent processes this in real-time locally, nothing is stored on our servers)

How Your API Keys Are Handled

Your Anthropic and PostBridge API keys are:

1. Entered by you in the app
2. Encrypted using your operating system's secure storage (macOS Keychain via Electron safeStorage)
3. Stored in our database in encrypted form
4. Decrypted only on your local device when running automation flows
5. Sent directly from your device to the respective API providers (Anthropic, PostBridge) — never routed through TweetAgent servers

How We Use Your Information

We use collected information to:

• Authenticate you and manage your account
• Store your automation configuration and preferences
• Display your activity history and engagement analytics
• Diagnose errors and improve the service

We do NOT use your information to:

• Train AI models
• Sell to third parties
• Send marketing communications (unless you opt in)
• Profile you for advertising

Data Storage and Security

• Account and activity data is stored on Supabase (PostgreSQL database) with row-level security
• API keys are encrypted using OS-level encryption on your device
• Database access is restricted to authenticated users who can only access their own data
• We use HTTPS for all data transmission

Third-Party Services

TweetAgent integrates with:

Your device communicates directly with Anthropic, PostBridge, and Twitter/X. TweetAgent does not act as an intermediary for these communications.

Data Retention

• Account data is retained as long as your account exists
• Activity logs are retained indefinitely for your reference
• Upon account deletion, all associated data is permanently removed

Your Rights

You have the right to:

• Access your data through the app's activity feed and settings
• Update your account information, personas, and preferences at any time
• Delete your account and all associated data
• Export your activity data (feature planned)

Children's Privacy

TweetAgent is not intended for use by anyone under 18 years of age. We do not knowingly collect information from children under 18.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)

International Data

Our database is hosted in the United States via Supabase. By using TweetAgent, you consent to the transfer and processing of your data in the United States.

Changes to This Policy

We will notify you of material changes to this Privacy Policy by:

• Updating the “Last updated” date at the top
• Displaying a notice in the app

Contact

For privacy-related questions or requests:

Email: support@tweetagent.ai

Website: https://tweetagent.ai