Privacy Policy

XFlux, Inc. ("XFlux," "we," "us") respects your privacy. This Privacy Policy explains how we collect, use, and share information when you use our website, dashboard, API, and monitoring services at https://xfluxapi.com.

Account information: email address, name, password (stored hashed), and plan tier when you register.

Billing information: processed by Stripe. We do not store full payment card numbers. We may receive billing status, customer ID, and subscription metadata from Stripe.

Usage data: API endpoint, method, status code, response time, and quota consumption associated with your account.

Monitor configuration: usernames you choose to monitor, keywords, webhook URLs, and delivery logs.

Technical data: IP address, browser type, and device information collected automatically via server logs and cookies necessary for authentication.

We use collected information to:

• Provide, operate, and improve the Service
• Authenticate users and enforce API quotas
• Process subscriptions and send billing-related communications
• Monitor service reliability and prevent abuse
• Comply with legal obligations

Service providers: We use third parties that process data on our behalf, including Stripe (payments), Supabase (database hosting), Vercel (application hosting), and Fly.io (background workers). They access data only to perform services for us.

Webhooks you configure: When you set a monitor webhook URL, we send tweet alert payloads to that endpoint at your direction.

Legal requirements: We may disclose information if required by law or to protect rights, safety, and security.

We do not sell your personal information.

We retain account and usage data while your account is active and as needed for billing, security, and legal compliance. You may request deletion of your account by contacting support@xfluxapi.com.

We use industry-standard measures including hashed passwords, API key hashing, HTTPS, and access controls. No method of transmission or storage is 100% secure.

We are based in the United States. If you access the Service from outside the U.S., your information may be processed in the U.S. and other countries where our providers operate.

Depending on your location, you may have rights to access, correct, delete, or export personal data. Contact support@xfluxapi.com to submit a request. We will respond within a reasonable timeframe.

The Service is not directed to individuals under 18. We do not knowingly collect data from children.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date.

Privacy inquiries: legal@xfluxapi.com