Privacy Policy for X-Space
This Privacy Policy explains how X-Space ("the extension", "we", "our") handles information when you use the X-Space Chrome extension.
1. What X-Space Does
X-Space helps users sync and search their own X (Twitter) content locally, and optionally generate AI summaries and reply drafts for selected tweets.
2. Information We Process
2.1 Content from X pages you use
- Tweet text, author/handle, tweet URL
- Quoted tweet text and quoted author
- Card/article metadata (title, description, URL, image URL)
- Media metadata (counts and media URLs)
- Sync metadata (tweet IDs, source type, timestamps)
2.2 Settings you provide
- Language, reply style, provider, base URL, and model preferences
- Optional X handle for likes / own tweets sync
2.3 API credentials you provide
- Your AI API key (encrypted before local storage)
2.4 Optional prompt content
- Custom instructions you enter when regenerating a reply
3. How We Use Information
Information is processed only for extension functionality requested by you, including:
- Syncing bookmarks, likes, and/or own tweets
- Local indexing, searching, and browsing of synced data
- Generating AI summaries and reply drafts when you explicitly trigger AI actions
- Exporting Markdown summaries and JSON backups when you explicitly request export
4. Storage and Retention
- Data is stored in Chrome extension storage (
chrome.storage). - Synced tweet data and API keys are not uploaded to a X-Space backend service.
- You can clear synced data at any time from extension settings.
- You can export/import your local data using built-in backup tools.
5. Data Sharing and Third Parties
- We do not sell personal data.
- We do not use your data for advertising.
- When you trigger AI features, relevant content (for example, tweet text and optional prompt) is sent to your selected AI provider endpoint (such as OpenAI, Anthropic/Claude, or a custom endpoint you configure).
6. Security
- API keys are encrypted with Web Crypto (AES-GCM) before local storage.
- Default AI provider endpoints use HTTPS.
- If you use a custom AI endpoint, you are responsible for reviewing that endpoint's privacy and security practices.
7. Your Choices and Controls
- You control whether to sync data and which source to sync.
- You control whether to use AI features.
- You control which provider/model/endpoint to use.
- You can clear local data and remove API keys at any time.
8. Children's Privacy
X-Space is not directed to children under 13, and we do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised effective date.
10. Contact
Project repository: https://github.com/cloudtrekcn/x-space