Privacy Policy

Effective Sep 14, 2026. This describes how FollowMetrix collects and uses information. It is an engineering disclosure, not a certification of GDPR, CCPA, SOC 2, or similar programs.

What we collect

When you sign in with X or Google we store your application account identifiers, name, email when the provider supplies it, timezone, and preferences. When you connect an X account for tracking we store the authorized X user ID, public profile fields needed for audience intelligence, and encrypted OAuth tokens on the server. We also store follow and unfollow events, application-derived scores and classifications, notes, tags, watchlists, billing references from Stripe, and operational logs such as request IDs.

How we use it

We use this information to provide private audience tracking and analytics for the X account you authorize, to send notifications you enable, to bill and enforce plan limits, and to keep the service secure. Audience intelligence stays private to your account. We do not sell personal data, customer notes, or audience datasets, and we do not use X Content for off-platform ad targeting.

Sharing, including X

We share information with processors needed to run the product: hosting, database and cache providers, Stripe for payments, email delivery, error monitoring if enabled, and private object storage for exports. When you connect X, the service receives authorized X activity and public profile or post information needed for tracking. We do not request X passwords, X cookies, or anyone else’s X developer credentials.

Retention

History is retained according to your account status and provider or legal requirements. Raw provider payloads are kept for about 30 days. Export files expire after 24 hours. In-app notifications are kept for about 12 months. Encrypted X tokens are removed when tracking stops. Account deletion starts promptly and removes customer data from live systems; some billing, security, and backup copies may remain for a limited period.

Your choices

You can export application data, disconnect X without deleting history, or delete your account from Settings. X redistribution rules may limit how much copied X profile or post content appears in exports. The browser extension reads only the X profile URL you are viewing so it can request your stored relationship intelligence. It does not read passwords, DMs, follower lists, or browsing history.

Contact

Privacy questions: use the contact method published on this site once a monitored address is configured.