Privacy Policy
Last updated: [DATE — update before launch] · Version 1.0
⚠️ TEMPLATE — Have a lawyer review before publishing to users.
Short version: We collect your tweet history to build your voice profile and reply logs to train your brain. We NEVER access Direct Messages. You can delete all your data anytime from Dashboard → Settings.
1. Who We Are
ekoreva is a browser extension that generates personalized Twitter/X reply suggestions. Contact: privacy@ekoreva.xyz
2. What We Collect
- Twitter data (via GetX API): Up to 500 of your recent replies/tweets — used to build your voice profile. We never collect Direct Messages.
- Reply logs: When you use ekoreva and pick a reply, we store the tweet context and your chosen reply to train your brain.
- Device fingerprint: A hash of your browser/device — used for fraud prevention and account security.
- Usage data: Daily reply count, features used — for billing limits.
- Payment data: Crypto wallet addresses only. No credit cards stored.
- Shadow Voice (optional, requires explicit consent): Text typed in Twitter's reply compose box ONLY. Never DMs. Disabled by default.
3. What We Do NOT Collect
- Direct Message content — hard-blocked at code level
- Passwords
- Browsing history outside Twitter/X
- Financial data beyond wallet addresses
4. Third Parties
- Anthropic — AI processing (Claude). Does not train on your data. Privacy Policy
- GetX API — Twitter data fetching
- Supabase — Database (AWS-hosted)
- Brevo / Resend — Email delivery
- Sentry — Error monitoring
We do NOT sell your data. Ad sponsors receive impression counts only — never user identities.
5. Data Retention
- Voice profiles: until account deletion
- Context memory (brain): auto-deleted after 12 months
- Fraud logs: anonymized after 30 days, deleted after 6 months
- Affiliate data: 7 years (legal requirement)
6. Your Rights (GDPR / CCPA)
- Access & Export: Dashboard → Settings → Export Data
- Delete: Dashboard → Settings → Delete Account
- Withdraw consent: Shadow Voice → Extension Settings tab
- Other requests: privacy@ekoreva.xyz — 30-day response
7. Chrome Extension Permissions
- storage: Stores auth token and voice profile on your device
- activeTab: Reads tweet content when you open the overlay
- scripting: Injects the overlay UI on Twitter/X pages
- clipboardWrite: Copies crypto wallet addresses when you click "Copy"
8. Children
ekoreva is not directed to users under 13. If you believe a child has an account, contact us immediately.
9. Contact
privacy@ekoreva.xyz