Privacy Policy

Last updated October 4, 2026

This policy explains what PeerX collects, why, and what you can do about it. PeerX is operated by Shakhzod Karimov, who is responsible for your data.

What we collect

When you sign in with X, we receive and store:

• your X account ID, username and display name;
• your profile image URL, bio and location as shown on your public X profile;
• your follower count, and a daily snapshot of it while you are tracked;
• your league, plan, trial dates and tracking status;
• a product name, link and description if you add one to your profile.

If you subscribe, we also store billing references from Dodo Payments: your Dodo customer and subscription IDs, plan, subscription status and billing-period end date. We keep a record of the billing notifications Dodo sends us, which can include the name and email address you gave at checkout.

What we do not collect

• Your X password. Sign-in uses X's official OAuth flow, so you enter your password on X, not on PeerX.
• Ongoing access to your X account. The sign-in token is used once to read your profile and is not stored.
• Card numbers or bank details. Payments are handled entirely by Dodo Payments.
• Your direct messages or who you follow. Public inspiration posts are processed as described below.

Inspiration Profiles

When you explicitly add or refresh an inspiration creator, we read their public X profile and up to 25 recent original posts. Post wording is processed in memory and is not saved. We store X account and post IDs, profile display details, public engagement counts, and structured observations such as topics, formats, lengths and posting cadence. This feature does not generate posts or reproduce the creator's wording.

Saved observations are hidden after 30 days. This is a display expiration, not scheduled deletion. A successful refresh replaces the previous sample; removing a profile deletes its observations. Minimal import and usage records remain for allowance and cost accounting. Inspiration creators can request removal of stored information through the contact address below.

Drafts and media

When you use the content inbox and composer, we store the ideas, drafts and threads you write, their status, and any images, GIFs or videos you attach, with their alt text. They are private to your account: attachments sit in private storage and are shown only to you through links that expire after an hour. Nothing is posted to X.

Deleting an item deletes its text and attachments. Removing an attachment, or the post it belongs to, deletes the file. Uploads you cancel and uploads we reject (for example an unsupported video format) are deleted too, and unfinished uploads are cleaned up the next time you add media.

AI writing help

When you choose an AI action in the composer, such as Improve hook or Draft → thread, the text of that post or thread is sent to Groq to generate suggestions. For Suggest CTA we also send your saved product name and description, never its link. We do not store the text you send or the suggestions you receive; a suggestion becomes part of your draft only if you choose it. We keep a small usage record (which action, when, and token counts) to apply your allowance and control costs.

How we use it

• to sign you in and keep you signed in;
• to track follower growth and place you in the right league;
• to show the public leaderboard and your public profile;
• to give you the features of your plan and manage your subscription;
• to prevent abuse and keep the service secure.

We do not sell your data or use it for advertising.

What is public

If you are tracked, your username, display name, profile image, follower count, league, growth, plan badge and any product you add are shown publicly on the leaderboard and your profile page. This information is already public on X.

Cookies

We use only necessary cookies: a signed, HTTP-only session cookie that keeps you signed in for up to 30 days, and two short-lived cookies (about 10 minutes) that protect the X sign-in flow. We do not use advertising or tracking cookies.

Service providers

• X — sign-in and public follower data.
• Dodo Payments — checkout, payments, invoices and the customer portal.
• Vercel — hosting and running the website.
• Neon — our PostgreSQL database.
• Cloudflare — private storage for media attachments (R2).
• Groq — generates AI writing suggestions from the text you choose to send.

These providers process data on our behalf or under their own privacy policies, and may store it in other countries.

Retention and deletion

We keep your data while your account exists. Email shahzodkarimov1001@gmail.com from the address you want us to reply to, include your X username, and we will delete your PeerX profile, snapshots, product data, drafts and media. Billing records may be kept where the law requires it; Dodo Payments keeps its own payment records. You can also ask for a copy of your data or a correction.

Security

We use HTTPS, signed session cookies, and keep secrets on the server only. No online service is perfectly secure, and we cannot guarantee absolute security.

Changes

We may update this policy. The date at the top shows the latest version.

Contact

Privacy questions or requests: shahzodkarimov1001@gmail.com. See also the Contact page.