Privacy policy
The short version: we read your X posts so we can copy them, and nothing else.
Who we are
Twinpost is operated by TimeToPost (Opsibyte), referred to here as “we”. We are responsible for the personal data described on this page. Questions go to support@timetopost.co.
What we use, and why
| Data | Why |
|---|---|
| Your email address | To create your account and send you sign-in codes. There is no password. |
| Your X posts: text, images, links and post IDs, read through the official X API with the access you grant | To publish the same post on the networks you choose. We read your own posts only. |
| Access tokens for X and each connected network (for Bluesky an app password, for Telegram your bot's token), plus your handle there | To read from X and post to your other accounts on your behalf. |
| A log of mirrored, skipped and failed posts with links to the copies | To show you what happened in the activity page and to help with support. |
| Subscription status from our payment provider | To know which plan you are on. We never see or store your full card number. |
| How you found us: the referring site and campaign tags (such as utm parameters or ad click IDs) on the first page you visited | To understand which channels bring people to Twinpost. Saved in your browser and sent with sign-up and checkout. |
| Answers to the optional “why not now?” question | Counted anonymously, without your account attached, to improve pricing and wording. |
We don't sell personal data and we don't show ads.
Who processes it for us
- Our hosting provider, which runs the servers and database.
- Stripe, which handles payments and stores your payment details.
- The networks you connect (X and your targets), which receive the posts you asked us to publish.
- If enabled, a privacy-friendly, cookie-free analytics tool that counts page views without identifying you.
Your browser
The web app keeps your sign-in tokens and first-visit attribution in your browser's local storage. We don't set advertising cookies. Clearing site data in your browser removes both.
How long we keep it
We keep your data for as long as you have an account. Disconnecting a network deletes its access token. Deleting your account removes your profile, tokens and activity log. Billing records that tax law requires us to keep are kept for the period the law sets.
Delete your account
You can do this yourself: sign in, open Plan & account and choose “Delete account”. Cancel any paid plan there first. You can also revoke Twinpost's access directly from the settings of X and each network.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to how we use it or complain to a data protection authority. Write to support@timetopost.co and we will answer.
Changes
If we change this policy in a way that matters, we will tell you by email before it takes effect.