Privacy Policy

TweetPipe ("we", "us", "our") operates the website tweetpipe.io and the TweetPipe service. This Privacy Policy explains what personal data we collect, why we collect it, and how we handle it.

By using TweetPipe, you consent to the data practices described in this policy.

Account information

• Email users: email address and a hashed password.
• Telegram Login users: Telegram user ID, username, and first name as provided by the Telegram Login Widget. We do not receive your Telegram password.

Service data

• Channels: Telegram channel IDs and titles for the destinations you connect.
• Sources: Twitter/X usernames, Truth Social usernames, and Telegram channel identifiers you subscribe to.
• Forwarding history: tweet IDs and URLs of posts that have been forwarded, used for deduplication.
• Filter settings: keyword lists, media preferences, and formatting rules you configure.

Automatically collected data

• Analytics: we use Mixpanel and Google Analytics to understand usage patterns. These services may collect anonymized page views, feature usage, and standard browser information (device type, browser, country).
• Error monitoring: we use Sentry to capture application errors. Error reports may include browser type, URL, and stack traces but do not intentionally include personal data.

• Provide the Service: authenticate you, forward posts to your Telegram destinations, enforce plan limits.
• Communicate with you: send OTP codes, subscription-related emails (welcome, payment issues, cancellation), and respond to contact form submissions.
• Improve the Service: analyze aggregated usage data to fix bugs and prioritize features.
• Process payments: your billing data is handled by Lemon Squeezy (our Merchant of Record). We store a subscription ID and status locally but do not store credit card numbers.

We do not sell your personal data. We share data only with the following third parties, as necessary to operate the Service:

• Lemon Squeezy: payment processing and subscription management (Merchant of Record).
• Telegram: delivering messages to your channels via the Telegram Bot API.
• Nitter (open-source Twitter frontend): TweetPipe fetches publicly available posts from X/Twitter via Nitter's RSS feeds. No private or authenticated data is accessed. You provide only the public usernames you wish to follow.
• Truth Social (Mastodon public API): TweetPipe fetches publicly available posts from Truth Social profiles using its public Mastodon-compatible API. No authentication or private data is involved.
• Resend: transactional email delivery (OTPs, billing notifications).
• Mixpanel & Google Analytics: anonymized product analytics.
• Sentry: error monitoring.

We retain your account data for as long as your account is active. When you delete your account, we delete your profile, channels, routes, and forwarding history. Anonymized analytics data may be retained indefinitely.

Processed webhook event records (used for idempotency) are retained but contain no personal data beyond a provider-assigned subscription ID.

Essential cookies: TweetPipe uses a single httpOnly authentication cookie ("token") to keep you signed in. This cookie is essential for the Service to function and does not require consent.

Analytics cookies: We use Mixpanel and Google Analytics to understand product usage. These services are only loaded after you accept cookies in our consent banner (shown on your first visit). If you reject or have not yet responded, no analytics scripts are loaded and no analytics cookies are set.

You can change your choice at any time by clearing your browser's site data for tweetpipe.io and reloading the page — the banner will reappear.

We protect your data with industry-standard measures including HTTPS encryption, hashed passwords (bcrypt), httpOnly cookies, and access controls. While no system is 100% secure, we take reasonable precautions to safeguard your information.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, email support@tweetpipe.io or use our contact form.

Your account data (email, channels, routes, forwarding history) is stored on our application servers. Billing and payment data is processed by Lemon Squeezy in the United States (Merchant of Record). Transactional email is handled by Resend. Product analytics events are processed by Mixpanel (United States) and Google Analytics. Error telemetry is processed by Sentry.

By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

TweetPipe is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. The "Effective date" at the top reflects the latest revision.

Questions about this policy? Reach out at tweetpipe.io/contact.