Privacy policy

What xcampfire is

xcampfire watches a set of X accounts you choose, picks out the posts worth replying to right now, and drafts a reply in your voice. You post it yourself, on X. xcampfire never posts, likes, follows, or sends messages on your behalf.

What we collect when you sign in with X

• Your X user id, username, display name and profile image, so the app knows whose queue it is showing.
• The email address on your X account, if you have a verified one and X releases it. It is used only to send you the alerts described below, and you can change or remove it on the settings page at any time.
• OAuth tokens that let the app read X as you. They are stored server-side, encrypted in transit, never shown to anyone, and used only for the reads listed here.

What we read from X while you use it

• Your own account. Your follower count, once a day, so the app can judge which accounts are the right size for you to reply to. Your own recent posts, so it can tell which of its suggestions you actually replied to and, later, how those replies performed.
• Who you follow. Once, when you build your watch set, to pick the accounts worth watching. We keep the list so it can be re-used without asking X again.
• Public posts from the accounts you watch. These are public on X. We keep the post text and its engagement counts so a suggestion can be scored and so a reply can be measured afterwards.
• Metrics on the replies you post. Impressions, profile clicks and similar figures for your own replies, which X only reports for thirty days. We store snapshots so you can see them after that.

Who else processes it

xcampfire runs on a small number of providers, each of which sees only what its job needs:

• X — the source of everything above, under its own terms and privacy policy.
• Anthropic — drafts are written by a Claude model. The post being replied to and a sample of your own past replies are sent to it to produce the draft. Anthropic does not train on this data under its commercial terms.
• Neon — the database. Vercel and Trigger.dev — the web app and the background jobs.
• Resend — sends the alert emails below, to the address you keep on the settings page.

We do not sell any of it, and there is no advertising.

Emails we send

Only alerts, and only for things with no other way to reach you: a reply whose metrics are about to fall out of X’s thirty-day window, and, if you operate a deployment, spending and outage notices. At most one per kind per day. Clearing the address on the settings page stops them.

How long we keep it

For as long as you have an account. Reply metrics are kept indefinitely because X stops serving them after thirty days and they cannot be fetched again. Sign-in tokens are replaced every time you sign in and can be revoked from your X settings at any moment, which ends all reads immediately.

Your choices

• Pause or remove any watched account on the accounts page.
• Change or remove your alert email on the settings page.
• Revoke xcampfire’s access under Connected apps in your X settings.
• Ask for your data to be deleted by emailing hello@xcampfire.com from the address on your account. We delete everything tied to your X id.

Changes

If this policy changes in a way that matters, the effective date above moves and you will see the new version the next time you sign in.