1. Introduction

Shag ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our X (Twitter) Auto-DM service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and password (stored securely using industry-standard encryption). If you sign up via social login (Google, GitHub), we receive basic profile information from those providers.

X Account Data

When you connect your X account, we receive access to:

Your X user ID, username, and profile information
OAuth access tokens to act on your behalf
Tweet and reply data to monitor for campaign keywords
Direct message sending capabilities (we do not read your existing DMs)

Campaign and DM Data

We collect and store:

Campaign configurations (keywords, triggers, DM templates)
Records of DMs sent through our Service
Engagement metrics (delivery status, response tracking)

Usage Data

We automatically collect information about how you interact with our service, including pages viewed, features used, and campaign performance metrics.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our X Auto-DM services
Monitor tweets and replies for your campaign keywords
Send automated DMs on your behalf when triggers are matched
Track DM delivery and campaign performance
Communicate with you about your account and our services
Enforce DM limits and prevent abuse
Ensure the security and integrity of our platform
Comply with legal obligations

4. X API and OAuth

Our Service uses X's API to provide automated DM functionality. By connecting your X account:

You authorize us to access your account via OAuth 2.0
We store encrypted access tokens to send DMs on your behalf
You can revoke access at any time through X's settings or our dashboard
We only use the minimum permissions required to provide our services

5. Data Sharing

We do not sell your personal information. We may share your information with:

X Corp (via their API to deliver DMs)
Payment processors (Stripe) for subscription billing
Service providers who assist in operating our platform
Law enforcement when required by law
Other parties with your explicit consent

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

Account data is retained until you delete your account
Campaign and DM history is retained for 90 days
Analytics data may be retained in anonymized form
X access tokens are deleted when you disconnect your account

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of sensitive data at rest and in transit
Secure OAuth token storage
Regular security audits and monitoring
Access controls and authentication requirements

8. Your Rights

You have the right to:

Access and receive a copy of your personal data
Correct inaccurate personal data
Request deletion of your personal data
Disconnect your X account at any time
Export your campaign data
Object to processing of your personal data

To exercise these rights, contact us at privacy@shag.sh or use the settings in your dashboard.

9. Cookies and Tracking

We use essential cookies to maintain your session and provide our services. We may also use:

Authentication cookies to keep you logged in
Preference cookies to remember your settings
Analytics cookies to understand how our service is used

10. International Data Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

11. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email for significant changes.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@shag.sh
Support: support@shag.sh