# Privacy Policy
**XTWEEP**
**Effective Date: November 03, 2025**
**Last Updated: November 03, 2025**
XTWEEP ("we," "us," "our," or the "Company") operates the social media platform accessible at **https://xtweep.com** (the "Site" or "Platform"). We are committed to protecting the privacy and security of our users' personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard information when you access or use the Site, including any features, content, or services offered through it.
By accessing or using XTWEEP, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy, in addition to our [Terms of Use](https://xtweep.com/static/terms). If you do not agree with this Privacy Policy, you must immediately cease using the Site.
**Important Note:** You must be at least **18 years of age** to create an account, access, or use XTWEEP. We do not knowingly collect personal information from individuals under 18. If we become aware that a user under 18 has provided personal information, we will promptly delete it and terminate the associated account.
---
## 1. Information We Collect
We collect information in three primary ways: (a) information you provide directly; (b) information collected automatically through your use of the Site; and (c) information from third parties.
### 1.1 Information You Provide Directly ("User-Provided Information")
When you register for an account, interact with the Platform, or communicate with us, you may provide:
- **Account Information:** Full name, username, email address, password (encrypted), date of birth (to verify age 18+), profile picture, bio, location, and any other details you choose to include in your public profile.
- **User Content:** Posts, comments, messages (direct or group), images, videos, links, hashtags, mentions, reactions, and any other content you upload, share, or generate on the Platform ("User Content").
- **Communications:** Information you provide when contacting us via the [Contact Us](https://xtweep.com/contacts) page, email, or support tickets, including your name, email, and message content.
- **Payment Information:** If you purchase premium features, subscriptions, or in-platform items in the future, we may collect billing details (processed securely via third-party payment processors; we do not store full credit card numbers).
- **Feedback and Surveys:** Responses to optional surveys, polls, or feedback requests.
### 1.2 Information Collected Automatically ("Technical and Usage Data")
As you navigate and interact with XTWEEP, we and our third-party service providers may automatically collect:
- **Device and Browser Information:** IP address, device type, operating system, browser type/version, unique device identifiers, mobile network information, and time zone settings.
- **Usage Data:** Pages viewed, features used, time spent on the Site, clickstream data, search terms, referral sources, and interaction patterns (e.g., likes, shares, follows).
- **Cookies and Similar Technologies:** We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies. These help with authentication, personalization, analytics, security, and advertising.
- **Essential Cookies:** Required for core functionality (e.g., logging in, security).
- **Performance/Analytics Cookies:** Track usage to improve the Site (e.g., via Google Analytics).
- **Functional Cookies:** Remember preferences (e.g., language, theme).
- **Advertising Cookies:** Serve targeted ads based on interests (e.g., via Google DoubleClick or partner networks).
You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling cookies may limit Site functionality.
- **Log Data:** Server logs recording access times, errors, and crash reports.
### 1.3 Information from Third Parties
- **Social Logins:** If you sign up or log in via third-party services (e.g., Google, Apple, or future integrations), we receive profile data authorized by you (e.g., name, email, profile photo).
- **Analytics and Advertising Partners:** Aggregated, anonymized data from providers like Google Analytics, Meta Pixel, or similar tools.
- **Public Sources:** Information from public profiles or posts on other platforms if you link accounts or share content.
We do **not** collect sensitive personal information (e.g., racial/ethnic origin, political opinions, religious beliefs, health data, sexual orientation, biometric data) unless voluntarily shared in User Content, in which case it is treated as standard User Content.
---
## 2. How We Use Your Information
We use collected information for the following legitimate purposes:
### 2.1 To Provide and Maintain the Service
- Create and manage your account.
- Facilitate posting, sharing, commenting, following, messaging, and other core social features.
- Verify age (18+) and enforce community guidelines.
- Deliver notifications (e.g., new followers, mentions, messages) via email, push, or in-app.
### 2.2 To Improve and Personalize the Platform
- Analyze usage trends to enhance features, UI/UX, and performance.
- Recommend content, users, or hashtags based on your activity and preferences.
- Conduct A/B testing and research.
### 2.3 For Communication
- Respond to inquiries via [Contact Us](https://xtweep.com/contacts).
- Send service-related updates, security alerts, or policy changes.
- With consent, send newsletters, promotions, or feature announcements (opt-out available).
### 2.4 For Safety, Security, and Compliance
- Detect, prevent, and investigate fraud, abuse, harassment, or violations of our [Terms of Use](https://xtweep.com/static/terms).
- Monitor for spam, malware, or unauthorized access.
- Comply with legal obligations, subpoenas, or law enforcement requests.
- Protect the rights, property, or safety of XTWEEP, users, or the public.
### 2.5 For Analytics, Research, and Advertising
- Generate aggregated, anonymized insights (e.g., demographic trends).
- Measure ad performance and serve interest-based ads on/off the Site.
- Partner with advertisers to show relevant promotions (you can opt out of personalized ads).
### 2.6 Legal Basis for Processing (EEA/UK Users)
If you are in the European Economic Area (EEA), UK, or other GDPR-applicable regions:
- **Contractual Necessity:** To fulfill our agreement with you (e.g., providing the service).
- **Legitimate Interests:** For security, analytics, improvement, and fraud prevention (balanced against your rights).
- **Consent:** For optional cookies, marketing emails, or sensitive data in User Content.
- **Legal Obligation:** When required by law.
You may withdraw consent at any time without affecting prior lawful processing.
---
## 3. How We Share Your Information
We do **not** sell your personal information. We may share information as follows:
### 3.1 With Your Consent or Direction
- When you share User Content publicly (visible to all users or followers).
- If you connect third-party apps or services.
### 3.2 Service Providers
Vendors processing data on our behalf under strict contracts (e.g., cloud hosting like AWS, analytics tools, email services, payment processors). They are prohibited from using data for other purposes.
### 3.3 Business Transfers
In the event of merger, acquisition, bankruptcy, or asset sale, your information may be transferred. We will notify you via email/Site notice if ownership changes materially affect privacy.
### 3.4 Legal and Safety Reasons
- To comply with laws, regulations, or valid legal processes (e.g., court orders).
- To enforce [Terms of Use](https://xtweep.com/static/terms), prevent harm, or protect rights.
- With law enforcement if we believe disclosure prevents crime or ensures safety.
### 3.5 Aggregated/Anonymized Data
Non-identifiable data shared with partners, researchers, or publicly (e.g., "X% of users are 25-34").
### 3.6 Advertising and Analytics Partners
Limited data (e.g., hashed identifiers, interests) for targeted ads or insights. See Section 6 for opt-out options.
---
## 4. Your Choices and Rights
### 4.1 Account Settings
- Edit profile, privacy settings, or visibility of posts.
- Manage notifications and email preferences.
- Download your data (User Content, connections) via account tools.
- Delete your account (permanently removes data after 30-day grace period, except as required by law).
### 4.2 Marketing Communications
Unsubscribe from promotional emails via the link in any message. You cannot opt out of essential service communications.
### 4.3 Cookies and Tracking
- Use browser settings to block/reject cookies.
- Opt out of interest-based ads via:
- [Google Ads Settings](https://adssettings.google.com)
- [Network Advertising Initiative](http://optout.networkadvertising.org)
- [Digital Advertising Alliance](http://optout.aboutads.info)
- Do Not Track (DNT): We honor DNT signals where technically feasible, but effectiveness varies.
### 4.4 Data Subject Rights (GDPR/CCPA/Others)
Depending on your location, you may have rights to:
- **Access:** Receive a copy of your personal data.
- **Rectification:** Correct inaccurate data.
- **Erasure:** Delete your data ("right to be forgotten").
- **Restriction:** Limit processing.
- **Portability:** Receive data in machine-readable format.
- **Objection:** Object to processing based on legitimate interests or direct marketing.
- **Non-Discrimination (CCPA):** Exercise rights without retaliation.
To exercise rights, contact us via [Contact Us](https://xtweep.com/contacts) or privacy@xtweep.com. We verify requests (e.g., via account login) and respond within 30-45 days (depending on jurisdiction). Authorized agents may submit on your behalf with proof.
**California Residents (CCPA/CPRA):**
- We do not sell or share personal information for cross-context behavioral advertising (as defined).
- You may request disclosure of categories collected/shared in the past 12 months.
- Opt-out of sales/sharing (if applicable in future) via cookie banner or request.
---
## 5. Data Security
We implement industry-standard measures to protect information:
- **Encryption:** TLS for data in transit; hashing/encryption for passwords and sensitive data at rest.
- **Access Controls:** Role-based access, multi-factor authentication for staff.
- **Monitoring:** Regular audits, penetration testing, and incident response plans.
No system is 100% secure. You are responsible for maintaining account confidentiality (e.g., strong passwords, logout after use). Report suspected breaches immediately.
In the event of a data breach likely to risk your rights, we will notify you and relevant authorities per applicable laws (e.g., within 72 hours under GDPR).
---
## 6. Data Retention
We retain information as long as necessary for the purposes outlined:
- **Account Data:** Until account deletion + 30 days (for recovery).
- **User Content:** Until deleted by you or us (e.g., for violations).
- **Logs/Backups:** Up to 12 months for security/legal needs.
- **Anonymized Data:** Indefinitely.
Deleted data may persist in backups for up to 90 days. We retain minimal data post-deletion if required by law.
---
## 7. International Data Transfers
XTWEEP is operated from the United States. If you are outside the U.S., your information is transferred to, processed, and stored in the U.S. or other countries with potentially different data protection laws.
For EEA/UK/Swiss users: Transfers rely on EU-U.S. Data Privacy Framework (DPF), Standard Contractual Clauses (SCCs), or your consent. We ensure adequate safeguards.
---
## 8. Children's Privacy
XTWEEP is strictly for users **18 years and older**. We do not target or knowingly collect data from children under 18. If discovered, we delete it immediately and terminate the account. Parents/guardians concerned about child data should contact us.
---
## 9. Third-Party Links and Services
The Site may contain links to external websites, plugins, or ads (e.g., embedded videos, sponsor links). We are not responsible for their privacy practices. Review their policies before interacting.
---
## 10. Changes to This Privacy Policy
We may update this Policy to reflect changes in practices, technology, or law. Material changes will be notified via:
- Email to your registered address.
- Prominent notice on the Site (e.g., banner).
- Updated "Last Updated" date.
Changes are effective 30 days after posting (immediately for new users). Continued use constitutes acceptance. If you disagree, stop using the Site and delete your account.
---
## 11. Contact Us
For questions, requests, or complaints:
- **Contact Page:** [https://xtweep.com/contacts](https://xtweep.com/contacts)
- **Email:** privacy@xtweep.com
- **Mailing Address:** XTWEEP Support, [Insert Physical Address if Applicable; otherwise omit]
**EU/UK Representative (GDPR):** [If applicable, insert details; otherwise: Contact privacy@xtweep.com]
**Data Protection Officer:** dpo@xtweep.com
---
## 12. Additional Legal Notices
- **Governing Law:** This Policy is governed by the laws of the State of California, USA, without regard to conflict of laws principles.
- **Dispute Resolution:** As per Section 10 of our [Terms of Use](https://xtweep.com/static/terms), disputes are resolved via binding arbitration (individual basis only).
- **Severability:** If any provision is invalid, the remainder remains enforceable.
- **No Waiver:** Failure to enforce any right does not waive it.
---
**About XTWEEP:** Learn more at [https://xtweep.com/static/about](https://xtweep.com/static/about).
**Terms of Use:** [https://xtweep.com/static/terms](https://xtweep.com/static/terms).
Thank you for trusting XTWEEP. We are committed to transparency and user empowerment in privacy matters.