Privacy Policy
XReply (“we”, “the service”) respects your privacy. This policy explains how we collect, use, store, and share information when you use the XReply website, cloud API, and browser extension. By using the service you acknowledge the practices described here.
1. Who we are
XReply helps you generate and rewrite replies in X (formerly Twitter) conversations. The website and cloud backend run at x.asiones.com (Cloudflare). Contact: xreply@asiones.com.
2. Information we collect
Depends on how you use the product:
- X sign-in (cloud mode): With your authorization we obtain and store your X user ID, username (@handle), display name, and—if you grant email access—your verified email (
confirmed_email). We do not store your X password, and we do not keep X access tokens long-term (only for the login request). - Account & billing: Plan, usage counts, Stripe customer ID and subscription status. Card numbers and other payment secrets are handled by Stripe; we do not store full card numbers.
- Cloud prompts: System prompts you save in managed mode (stored in our cloud).
- Generation content & logs: To provide the service, meter quota, and attribute cost we may log post text, drafts, model reply summaries, and token usage metadata. See “How we use information”.
- Technical & security data: IP address (e.g. login rate limits), request times, browser/extension session tokens stored in extension sync storage or site local storage.
- Bring-your-own API mode: Base URL, API key, model, and local prompts stay in your browser/extension (or browser account sync) and are not uploaded to our servers. Requests go directly to your endpoint.
3. How we use information
- Sign-in, sessions, and account identity;
- Daily quotas, cloud features, and upgrades;
- Calling configured LLM APIs to generate or rewrite replies;
- Subscription payments, invoices, and support;
- Security (abuse prevention, rate limits, debugging) and service quality;
- Legal compliance.
We do not sell your personal information, and we do not use your content for third-party advertising unrelated to this service.
4. How we share information
Only as needed to run the service:
- X: OAuth sign-in and identity;
- Stripe: Checkout and billing portal;
- Cloudflare: Hosting, compute, database, and key-value storage;
- LLM providers: In cloud mode, prompts and post/draft text needed to generate replies are sent to our configured model API.
We may disclose or transfer data when required by law, to protect rights and safety, or in a merger/transfer.
5. Cookies & local storage
The site uses browser localStorage for session data; the extension uses extension storage for sessions and settings. Referral links (/s/username) may set a first-touch cookie (xreply_ref) for attribution; an existing value is not overwritten. Language preference may be stored in xreply_lang. We do not use third-party ad tracking cookies. You can clear site data or sign out of the extension at any time.
6. Retention
- Account & sessions: while you use the service; sign-out clears local sessions; email us to request account deletion.
- Usage & event logs: for billing, attribution, and operations, then deleted or anonymized on a reasonable schedule.
- Cloud prompts: until you change, overwrite, or request deletion.
7. Security
We use reasonable technical and organizational measures (HTTPS, secret separation, least privilege). No transmission is perfectly secure; protect your devices and X account.
8. Children
The service is not directed at children under 13 (or a higher age where required). If we learn we collected such data, we will delete it promptly.
9. Your rights
Where applicable law allows, you may request access, correction, export, or deletion of personal data, or withdraw OAuth consent (also via X account settings). Contact xreply@asiones.com.
10. International transfers
Infrastructure and vendors may be outside your country. By using the service you understand data may be processed across borders under those providers’ safeguards.
11. Policy updates
We may update this policy and will revise the effective date on this page. Continued use after material changes means you accept the updated policy.
12. Contact
Privacy questions: xreply@asiones.com · Site: https://x.asiones.com/