Privacy Policy

Tweetpilot is operated by Muhammad Zain, an individual based in Pakistan. This policy explains what information Tweetpilot collects, how it is used, and the choices you have. It covers the Tweetpilot website, browser extension, and dashboard. By using Tweetpilot you agree to this policy.

When you join the waitlist, we collect your name and email address so we can reach you about access.

When you create an account, we collect your name, email address, and a password, or your basic profile details if you choose to sign in with Google.

To personalize your replies, we store the settings you choose: the voice you select or build, the topics you care about, your profile context, and any custom instructions.

When Tweetpilot drafts a reply, it processes the public post you are replying to, its thread context, and any attached images, so it can generate a relevant response. Generated replies and their status are saved to your account so you can review them.

When you write or schedule a post in the dashboard, we store its text, any media you upload, its schedule, and its publishing status. Once a scheduled post is published, we store the link to it on X.

If you connect an X account, Tweetpilot reads your recent public posts to learn your writing voice. A few example posts may be saved as part of that voice profile.

When you sign in, we record technical details such as your IP address and browser user-agent. We use them to keep your account secure, detect suspicious activity, and manage your active sessions.

We use the information described above to provide and operate the service, to generate replies and posts and learn your writing voice, to publish the posts you schedule to a connected X account, to create and secure your account and prevent abuse, to respond to you and send messages about your account, and to understand and improve how the product is used.

When you use the Tweetpilot browser extension on X, it works inside the browser session you are already signed in to. The extension never asks for, sees, or stores your X password, and it does not post for you: it drafts replies that you copy and post yourself.

Connecting an X account from the dashboard uses X's official OAuth. You grant Tweetpilot permission to read your recent public posts and to publish posts on your behalf, which is what lets it learn your voice and send the posts you schedule. The access tokens are encrypted before they are stored, and you can disconnect the account at any time, which removes those tokens.

Replies and posts are generated using third-party AI providers, reached through an AI gateway. The post content and the context described above are sent to them to produce a draft. If a draft references a web link, we may fetch that page through a third-party reading service so the model can summarize it. These providers process the data only to return a result.

We do not sell your personal information. We share it only with the service providers listed below, who process it on our behalf to run Tweetpilot; with X, when you choose to publish a post to a connected account; and where we are required to by law or need to protect the rights, safety, and security of our users or the service.

If ownership of Tweetpilot ever changes, your information may be transferred to the new owner under the protections of this policy.

We rely on a small number of service providers to run Tweetpilot: a cloud platform that hosts the website, application, and database; object storage for the media you upload; AI providers reached through an AI gateway; an email delivery service; a form service that collects waitlist sign-ups; and privacy-friendly website analytics. They process data only as needed to deliver the service.

Tweetpilot is operated from Pakistan, and our service providers may process and store data in other countries, including in the United States and Europe. Wherever your data is processed, this policy applies, and we use established providers that offer appropriate safeguards for the data they handle.

The website stores your theme preference in your browser. When you sign in to the dashboard, we set secure cookies that keep you signed in. The extension stores its sign-in token and your settings in the browser's extension storage. We use privacy-friendly product analytics to understand how the website is used.

We take reasonable measures to protect your information. Account passwords are hashed, connected-account access tokens are encrypted at rest, and traffic between your browser and our servers is encrypted in transit. Access to stored data is limited to what is needed to run the service. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

We keep your information for as long as your account is active or as needed to provide the service. You can edit or delete your generated replies and posts, remove media you uploaded, disconnect connected accounts, and update your settings at any time from the dashboard.

To delete your account and the data associated with it, contact us at legal@tweetpilot.co. We remove the associated data, except for anything we must keep to meet a legal obligation.

You can access and update most of your information directly in the dashboard. Depending on where you live, you may also have rights to access, correct, delete, or receive a copy of your personal data, or to object to or restrict certain processing. To make any of these requests, contact us at legal@tweetpilot.co, and we will respond as required by applicable law.

Tweetpilot is not directed to anyone under 16, and we do not knowingly collect information from them. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as the product evolves. When we do, we will change the date shown at the top of this page.

Questions about privacy? Reach us at legal@tweetpilot.co.