Privacy Policy

Last updated: December 2, 2025

Introduction

XSpark ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information

  • Email address
  • Name and profile information
  • Twitter/X account credentials (OAuth tokens)
  • Billing information (processed securely through DodPayments)

Usage Data

  • Tweet content generated and posted
  • Engagement metrics and analytics
  • Account activity and automation logs
  • Device information and IP addresses

How We Use Your Information

We use the information we collect to:

  • Provide and maintain our AI automation service
  • Generate and post tweets on your behalf
  • Analyze performance and optimize content
  • Process payments and manage subscriptions
  • Send service updates and support communications
  • Improve our service and develop new features
  • Comply with legal obligations

Data Storage and Security

We use Firebase/Firestore for secure data storage. Your data is encrypted in transit and at rest. We implement industry-standard security measures including:

  • Encrypted data transmission (SSL/TLS)
  • Secure OAuth authentication
  • Regular security audits
  • Access controls and monitoring

Third-Party Services

We use the following third-party services that may process your data:

  • TwitterAPI.io: Third-party service to access X API for posting and managing content
  • OpenAI (GPT-4): For AI content generation and analysis
  • Dodo Payments: For secure payment processing and subscription management
  • Firebase/Firestore: For cloud data storage and real-time database
  • Resend: For transactional email delivery

These services have their own privacy policies. We recommend reviewing their policies. We are not responsible for their data practices.

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Opt-out of marketing communications
  • Withdraw consent for data processing

To exercise these rights, contact us at privacy@xspark.ai

Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we remove your personal data within 30 days, except where we're required to retain it for legal purposes.

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: gen@xspark.pro