Privacy Policy

This Privacy Policy explains what personal information Xmorning collects, how we use it and the choices you have. We collect only what we need to operate the Service.

1. Information we collect

• Account data — name, email and authentication credentials.
• Content — posts, drafts, voice samples and tool inputs/outputs you create or upload.
• Connected accounts — handles, OAuth tokens or app passwords for X, LinkedIn, Threads and Bluesky. Bluesky app passwords are encrypted at rest.
• Usage — feature usage events used for limits, billing and product improvement.
• Technical — IP address, browser, device and basic logs.

2. How we use your information

• Provide, maintain and improve the Service;
• Generate AI content on your request via third-party model providers;
• Publish or schedule posts to platforms you connect;
• Bill subscriptions and prevent abuse;
• Send transactional emails (welcome, trial reminders, publish failures);
• Comply with legal obligations.

3. AI processing

Prompts and content you submit to AI tools are sent to our model provider (Lovable AI Gateway, which routes to Google and OpenAI models). We do not use your content to train models.

4. Sharing

We do not sell your personal information. We share it only with:

• Service providers (hosting, database, AI inference, email, payments) acting on our instructions;
• The social platforms you choose to connect;
• Authorities when required by law.

5. Data retention

We retain your data for as long as your account is active. After account deletion, we remove personal data within 30 days, except where retention is required by law (e.g., billing records).

6. Security

We use industry-standard safeguards: encryption in transit, row-level security in our database, and encryption at rest for sensitive credentials such as Bluesky app passwords. No system is 100% secure.

7. Your rights (GDPR / CCPA)

You may request to:

• Access the personal information we hold about you;
• Correct or delete your information;
• Export your data;
• Withdraw consent or object to certain processing.

Email privacy@xmorning.com to exercise these rights.

8. International transfers

Our infrastructure may process data outside your country of residence. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

9. Children

The Service is not directed to children under 16.

10. Changes

We will notify you of material changes by email or in-app notice.

11. Contact

Email privacy@xmorning.com.