Privacy Policy
Last updated: August 7, 2026
1. Who we are
TweetExporter ("we", "us") provides exports of publicly available X/Twitter data. This policy explains what personal data we collect from you as a user of the service, how we use it, and the choices you have. For personal data contained in export files, see section 3.
2. Data we collect
Account data: your email address, optional name, and a hashed password. If you sign in with Google, we receive your name, email, and avatar from Google — never your Google password.
Order data: the handles or search queries you export, order status, and delivered files (kept for 90 days).
Billing data: your payment card is handled entirely by our payment processor; we store only the card brand, last four digits, and your invoice history.
Technical data: server logs (IP address, browser, timestamps) used for security and debugging.
3. How we use your data
We use your data to operate the service: running your exports, notifying you when files are ready or orders fail, processing payments, preventing abuse, and providing support. With your consent we send occasional product updates, which you can turn off in Settings or via the unsubscribe link in any email.
Export files contain publicly available third-party data fetched at your instruction. We process it solely to compile and deliver your file, keep it no longer than 90 days, and do not use it for any other purpose. Your responsibilities for this data after download are described in our Terms of Service.
4. Payment processing
Payments are processed by a PCI-DSS-compliant payment provider. Your full card details never touch our servers.
6. Data retention
Account data is kept while your account is active and deleted within 30 days of account closure. Export files are deleted 90 days after completion. Server logs are kept for up to 12 months. Invoice records are kept as long as tax law requires.
8. Your rights
Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Email us and we will respond within 30 days. You can also delete your account directly from Settings, and you may lodge a complaint with your local data protection authority.
9. Security
Data is encrypted in transit and at rest. Access to production systems is restricted, logged, and protected by multi-factor authentication.
10. International transfers
Our providers may process data outside your country. Where data leaves the EEA or UK, transfers are protected by adequacy decisions or standard contractual clauses.
11. Changes to this policy
We may update this policy from time to time. For material changes we will notify you by email. The date at the top of this page shows the current version.
12. Contact
Privacy questions and data requests: support@tweetexporter.com.