Privacy Notice

1. Information we collect

Depending on how you use xgraph, we may process:

• Account information from X when you sign in, such as your X user ID, username, profile image, follower/following counts, and email if X provides it.
• Audience mapping data needed to build your map, including public profile information for accounts in your followers/following (e.g. usernames, display names, profile images, and self-described locations) and derived coordinates.
• Billing information. Payments are handled by Paddle as Merchant of Record. We receive subscription and customer identifiers, status, and related billing events; we do not store full payment card numbers.
• Usage and technical data, such as basic device/browser information, logs, and analytics events (including via Vercel Analytics) that help us operate and improve the Service.

2. How we use information

We use information to:

• authenticate you and provide the Service;
• create and display audience maps and related job status;
• process subscriptions, prevent fraud, and provide support;
• monitor reliability, security, and product performance; and
• comply with legal obligations.

3. Legal bases (where applicable)

If you are in a region that requires a legal basis for processing (such as the EEA/UK), we typically rely on performance of a contract (providing the Service you request), legitimate interests (securing and improving the Service), and consent where required.

4. Sharing

We share information with:

• Service providers that help us run xgraph (e.g. hosting, databases, analytics, map rendering via Mapbox, and payment processing via Paddle);
• People you choose when you use sharing features; and
• Authorities when required by law or to protect rights and safety.

We do not sell your personal information.

5. Retention

We retain account and job data for as long as needed to provide the Service and for reasonable backup, dispute, and legal compliance periods. You may request deletion of your account data as described below; some records may be retained where legally required.

6. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International transfers

We may process information in countries other than where you live, including where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To make a request, contact us at the email below. You can disconnect X access through X's account settings and cancel subscriptions through Paddle's customer tools.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children.

10. Changes

We may update this Privacy Notice periodically. The "Last updated" date at the top will change when we do. Continued use of the Service after an update means you acknowledge the revised notice.

11. Contact

Privacy questions or requests: support@xgraph.app.