This Privacy Policy explains how ScrubMyX, a service of Socialhose ("ScrubMyX," "we," "us," or "our"), collects, uses, shares, and retains information when you use the ScrubMyX website and services (the "Service"). By using the Service you agree to this Policy and to our Terms of Service. We operate in the United States, and the Service is governed by the laws of the State of Texas.
Plain summary: we collect the information needed to run ScrubMyX, and we use it broadly to the fullest extent allowed by law. That includes operating, securing, analyzing, and improving our products and developing new ones. We obtain your X data in two ways: through the official X API, and through your own upload of your X data export. Texas residents have privacy rights, described below, which we honor.
1. Information We Collect
Information from X (via the official X API or your data export)
- Your X profile: user id, handle, display name, avatar and banner images, bio, location, website, verification status and type, follower/following/post counts, and account creation date.
- Your X content: your posts, replies, reposts, and likes (including text, timestamps, engagement counts, attached media URLs, and related metadata), whether you upload an X data export or we collect it through the official X API at your direction. We store this to provide the Service (for example, to let you review and delete it).
- OAuth credentials: access and refresh tokens issued by X, stored encrypted and used to act on your account as you direct.
Information you provide
- Account and contact details such as your email address and name.
- Files you upload, such as your X data export.
- Payment information, processed by our payment processor (Stripe). We receive limited billing metadata (such as amount, status, and a payment identifier), not your full card number.
- Communications you send us, such as support requests.
Information collected automatically
- Device and usage data: IP address, browser and device information, pages and features used, actions taken, and timestamps.
- Cookies, local storage, and similar technologies used to keep you signed in, remember preferences, secure the Service, and measure usage.
2. How We Use Information
We use the information we collect for any lawful purpose, including to:
- provide, operate, maintain, and secure the Service, and carry out the operations you request (such as collecting and deleting your X content);
- process payments and administer your prepaid wallet;
- prevent fraud and abuse, enforce our Terms, and protect our rights, users, and systems;
- monitor, analyze, and understand usage and trends;
- improve, troubleshoot, and develop our products, features, and services, including by analyzing usage and content and by training, evaluating, and improving our models, algorithms, and automated systems;
- create and use de-identified, anonymized, or aggregated data, which is no longer associated with you and which we may use and disclose for any purpose;
- communicate with you, including service messages and, where permitted, marketing; and
- comply with legal obligations and respond to lawful requests.
3. How We Share Information
We may share information:
- With service providers and processors who help us run the Service and act on our behalf, such as X (the official X API), our payment processor (Stripe), hosting and infrastructure providers, analytics providers, and AI/processing providers;
- With our affiliates for the purposes described in this Policy;
- In a business transfer such as a merger, acquisition, financing, or sale of assets;
- For legal, safety, and compliance reasons, including to comply with law or legal process and to protect rights, property, and safety;
- At your direction or with your consent; and
- De-identified or aggregated information, which we may share for any purpose.
Depending on how these activities are categorized under applicable law, some of our data practices, such as analytics, advertising, or sharing de-identified or aggregated data, may be considered "selling" personal data, "sharing" it for targeted advertising, or "profiling." Where the law gives you the right to opt out of these activities, you may do so as described in "Your Texas Privacy Rights" below.
4. How We Obtain Your X Data, and Accuracy
We obtain your X data in two ways: through the official X API, and through your own upload of your X data export. When we collect through the API, the profile, content, and counts we hold reflect what X returns to us directly. What we get is what X says. When you upload your X data export, we process the file as X generated it. In both cases we do not independently verify or reconstruct the data and are not responsible for its accuracy, completeness, or timeliness. Your X data also remains subject to X's own terms and policies.
5. Data Retention
We retain information for as long as needed to provide the Service, for our legitimate business purposes (such as analytics, security, and product development), and as required or permitted by law. We may retain de-identified or aggregated data indefinitely. Residual copies may persist in backups for a limited period. Note that deleting content on X is permanent; this Policy concerns the information ScrubMyX holds, not content already removed on X.
6. Your Texas Privacy Rights
If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) gives you the right to:
- confirm whether we process your personal data and access it;
- correct inaccuracies in your personal data;
- delete personal data we have collected from you;
- obtain a portable copy of personal data you provided; and
- opt out of the processing of your personal data for (a) targeted advertising, (b) the sale of personal data, or (c) profiling in furtherance of decisions that produce legal or similarly significant effects.
To exercise these rights, email [email protected]. We will verify your request as required by law and respond within the timeframe the law allows. You may use an authorized agent. If we decline your request, you may appeal by replying to our decision; if your appeal is denied, you may contact the Texas Attorney General. We will not discriminate against you for exercising these rights. Rights are subject to the exceptions and limits in applicable law. For example, we may retain or use information where the law permits, and de-identified or aggregated data is not subject to deletion.
7. Cookies and Tracking
We use cookies, local storage, and similar technologies to operate the Service, keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings, though some features may not work without them.
8. Security
We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption of stored X OAuth tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.
10. Third-Party Services
The Service relies on and links to third parties (such as X and Stripe) that have their own privacy practices. We are not responsible for their practices, and we encourage you to review their policies.
11. Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
12. Contact
Questions about this Policy or your information? Contact us at [email protected].