Privacy Policy

Last updated: April 2, 2026

1. Introduction

Welcome to XAgently. We are committed to protecting the privacy of our users. This Privacy Policy explains what information we collect when you use our AI-powered content generation platform, how we use that information, and what choices you have regarding your data.

By accessing or using XAgently, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

2. Data We Collect

We collect the following categories of information:

Account Information

• Email address (when you register via email or Google OAuth)
• Display name (if provided)
• Twitter/X handle (provided during onboarding)
• Authentication tokens managed by Firebase Authentication

Usage Data

• Content generation history (formats selected, topics used, output types)
• Credit usage and transaction logs
• Feature interactions (tools used, settings changed)
• Session duration and frequency

Analytics Data

• Pages visited and navigation paths
• Referral sources
• Engagement metrics collected via Google Analytics 4

Technical Data

• Browser type and version
• Operating system
• Screen resolution
• IP address (anonymized by default through GA4 settings)
• Device type (desktop, tablet, mobile)

3. Cookies

XAgently uses cookies and similar technologies for analytics purposes. Specifically:

• Google Analytics 4 (GA4) cookies - Used to understand how visitors interact with the site. These cookies collect anonymized data about page views, session duration, and user navigation patterns.
• Local storage - Used to store your preferences (theme, language, consent choice), authentication state, credit logs, and cached data. This is not shared with third parties.

We implement GA4 Consent Mode v2, which means analytics data collection is denied by default until you provide explicit consent.

4. How We Use Data

We use the information we collect for the following purposes:

• Service delivery - To authenticate your account, manage credits, and generate content based on your requests
• Voice profile - To analyze your writing style from your public tweets and tailor AI-generated content to match your tone
• Product improvement - To understand usage patterns and improve features, performance, and reliability
• Analytics - To measure site traffic and identify areas for improvement (only with your consent)
• Security - To detect and prevent abuse, unauthorized access, or fraudulent activity
• Communication - To send important service updates or respond to support requests

5. Data Storage

Your data is stored using the following infrastructure:

• Firebase Authentication - Manages your login credentials and session tokens. Hosted on Google Cloud infrastructure.
• Cloud Firestore - Stores user profiles, plan information, and account-level data. Located in Google Cloud data centers with encryption at rest.
• Local storage (browser) - Stores preferences, cached tweets, credit logs, generation history, and voice profiles. This data remains on your device and is not transmitted to our servers unless explicitly synced.

We do not operate our own database servers. All server-side data is managed through Google's Firebase platform, which is SOC 2 and ISO 27001 certified.

6. Third-Party Services

XAgently integrates with the following third-party services:

• Google Analytics 4 - For anonymized website analytics (only with your consent). Google Privacy Policy
• Firebase / Google Cloud - For authentication and database services. Firebase Privacy
• AI model providers - We route content generation requests to providers including Anthropic (Claude), OpenAI (GPT-4o), xAI (Grok), and Google (Gemini). Prompts are sent to these APIs for processing. Each provider has its own data handling policies.
• Twitter/X API - We fetch publicly available tweet data through a proxy to provide context for content generation. We access only public information.
• Cloudflare Workers - Our backend proxy runs on Cloudflare's edge network, which may process requests temporarily. Cloudflare Privacy Policy

We do not sell your personal data to any third party.

7. Your Rights

If you are located in the European Economic Area (EEA) or in a jurisdiction with similar data protection laws, you have the following rights under the GDPR:

• Right of access - You can request a copy of the personal data we hold about you.
• Right to rectification - You can ask us to correct inaccurate or incomplete data.
• Right to erasure - You can request deletion of your personal data ("right to be forgotten").
• Right to restriction - You can ask us to limit how we process your data.
• Right to data portability - You can request your data in a structured, machine-readable format.
• Right to object - You can object to processing based on legitimate interest.
• Right to withdraw consent - You can withdraw consent for analytics cookies at any time by clearing local storage or using browser settings.

To exercise any of these rights, contact us at the email address listed below. We will respond within 30 days.

8. Data Security

We take reasonable measures to protect your information, including:

• All data transmitted between your browser and our services is encrypted via HTTPS/TLS.
• Firebase Authentication uses industry-standard encryption for credential storage.
• API keys for AI providers are stored locally in your browser and are not transmitted to our servers.
• IP addresses are anonymized in our analytics configuration.
• We conduct periodic reviews of our data handling practices.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we may provide additional notice through the platform.

We encourage you to review this page periodically to stay informed about how we protect your data.

10. Contact

If you have questions or concerns about this Privacy Policy or your personal data, please reach out: