Privacy Policy
Effective October 29, 2026
MagnetX ("we", "us") is a suggestion tool. It points you to recent public posts in your niche and offers a reply idea for each, which you can use, change or ignore. Everything you do on X, you do yourself. This policy explains what we collect, why, and the choices you have. It covers magnetx.co and app.magnetx.co.
What we collect
- Your Google account basics. When you sign in with Google we receive your name, email address and profile picture. We ask Google for nothing else.
- Your X handle and public X profile. You give us your handle. We fetch your public profile (name, bio, profile picture, follower and following counts) and recent public posts.
- How you use MagnetX. Which posts we showed you, which you marked done or skipped, how many reply drafts you asked for, and when. We use this to run your daily batches and to improve the product.
- The demo on magnetx.co. If you try the demo, we store the X handle you type, a one-way hash of your IP address for rate limiting, and the campaign tags of the link you came from. We use them only to run the demo and understand interest. If you leave before the posts load, we may send them to you once as a direct message on X.
- Text you choose to add. If you type your own experience to shape a suggestion, we send it to our AI provider to write that suggestion. We don't keep it.
We never ask for your X password and we never post, like or follow on X for you.
How we use it
- To sign you in and keep your account.
- To show your starting numbers and pick posts for you.
- To write reply suggestions and enforce fair-use limits (20 posts per 12 hours, 5 suggestions per post).
- To understand which features help, in aggregate.
We don't sell your data, use it for advertising, or use it to train AI models.
Google user data
We use the name, email and profile picture from Google only to create and identify your MagnetX account. We don't share them with anyone except the service providers below, which process them on our behalf. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Who processes data for us
- Supabase: sign-in and database.
- Railway and Vercel: hosting for our servers and website.
- Apify: fetching public X profiles and posts.
- OpenAI: writing reply suggestions from a public post (and your experience text, if you add it).
- OpenRouter: judging whether public posts are relevant. It only sees public posts.
- Vercel Web Analytics: counting page visits, without cookies.
How long we keep it
We keep your account data while your account is active. Ask us to delete your account and we'll delete your data within 30 days, except where the law requires us to keep something.
Your choices and rights
You can ask us to show, correct, export or delete your data, or to stop using it, by emailing akshat@magnetx.co. You can also revoke MagnetX's access in your Google account settings at any time.
Security
Data is encrypted in transit, access to our systems is limited and keys are rotated when a provider reports an incident. No system is perfectly secure, so we'll tell you promptly if a breach affects you.
Children
MagnetX is not for anyone under 18, and we don't knowingly collect their data.
Changes
If we change this policy in a meaningful way we'll update the date above and tell you in the app.
Contact
Questions or requests: akshat@magnetx.co.