Privacy Policy

Last updated: June 15, 2026

PostRoost ("PostRoost," "we," "us") is an independent tool that helps you organize your bookmarks from X (formerly Twitter). PostRoost is not affiliated with, endorsed by, or sponsored by X Corp. This policy explains what we collect, why, and your choices.

Information we collect

• X account info. When you sign in with X, we receive your X user ID, username, display name, and profile image via X's OAuth — we never see or store your X password.
• X access tokens. We store the OAuth access/refresh tokens X issues so we can read your bookmarks on your behalf. They stay on our servers and are never shared.
• Your bookmarks. Tweet content, authors, media URLs, and public metrics for the bookmarks you sync, so we can display and organize them.
• Content you create. Notes, tags, folders, and display preferences you add in PostRoost.
• Email. If you provide one, we use it for account and billing notifications. (X does not share your email with us.)
• Usage & security logs. IP address, browser/device information, approximate location derived from IP, and timestamps of key actions, to keep the service secure and prevent abuse.
• Billing data. If you subscribe, payments are processed by Stripe. We store your Stripe customer ID and subscription status; we never store full card numbers.

How we use your information

• Operate and provide PostRoost — sync, display, search, and organize your bookmarks.
• Authenticate you and keep your account secure.
• Process subscriptions and send account/billing communications.
• For Pro AI features, send selected tweet text to our AI provider (xAI / Grok) to generate summaries and tag suggestions. This content is not used to train third-party models.
• Detect, prevent, and investigate abuse or security issues.

Sharing

We do not sell your personal information. We share data only with service providers who help us run PostRoost:

• X — for authentication and reading your bookmarks (via its API).
• Stripe — to process payments and manage subscriptions.
• xAI — to generate AI summaries/tags for Pro users.
• Hosting & infrastructure providers — to operate the service.

We may also disclose information if required by law or to protect our rights and users.

Data retention

We keep your information while your account is active. When you delete your account (or ask us to), we delete your bookmarks, notes, tags, folders, and tokens, except where we must retain limited records for legal, security, or billing purposes.

Security

Your tokens and data are stored on secured servers and transmitted over HTTPS. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

Your choices & rights

• Revoke PostRoost's access anytime in your X settings (Connected apps).
• Delete bookmarks individually, or request full account deletion by contacting us.
• Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise them.

Cookies & local storage

We use a session cookie to keep you signed in, and your browser's local storage to remember interface preferences (like your view and styling). We do not use third-party advertising cookies.

Children

PostRoost is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above, and where appropriate we'll notify you.

Contact

Questions or requests? Email [email protected].