Browser Extension Privacy Policy

When you are on x.com (or twitter.com), the extension reads, from the page you are already viewing:

• The text of posts in your timeline
• The post author's public display name and handle
• The post’s public engagement counts (likes, reposts, replies)
• Text you select on the page (only when you choose "Rewrite")

It reads this from the page content (the DOM). It does not use the X/Twitter API, and it does not read your direct messages, your password, or any page other than x.com / twitter.com.

The extension stores the following locally in your browser (chrome.storage.local). This data stays on your device and is not sent to us except where noted in Section 3:

• Your Postvoy pairing token (used to authenticate to your Postvoy account) and the Postvoy app URL you paired with
• A short, rolling list of recently seen posts (author handle, post text, public engagement counts) so the dashboard can show the most engaging posts from your feed. This list is capped and automatically deleted after about 36 hours.

Data is sent to your Postvoy account’s server only when you take an action that requires it:

• Generate a reply to a post — the selected post’s text, author handle, and public engagement counts are sent so Postvoy can draft a reply
• Rewrite selected text — the text you selected is sent
• Compose a post from an idea — the idea text you typed is sent
• Dashboard — the extension requests your account summary (follower count, your reply activity, credits) from your Postvoy account

This information is sent over an encrypted (HTTPS) connection, authenticated by your pairing token, and is processed by Postvoy’s servers and the AI service Postvoy uses to produce your draft. It is associated with your Postvoy account and handled under the main Postvoy Privacy Policy.

• We do not sell or rent your data
• We do not show ads or use third-party advertising or analytics trackers in the extension
• We do not post, like, repost, follow, or message on your behalf — every action is initiated and sent by you
• We do not transfer your data to anyone other than the Postvoy service required to provide the feature you requested

• The locally stored "recently seen posts" list is removed automatically after about 36 hours, and entirely when you uninstall the extension
• Your pairing token is removed when you click Disconnect in the extension, when the token is revoked in Postvoy Settings, or when you uninstall the extension
• Text submitted to generate a draft is retained on your Postvoy account as part of your activity history, under the main Postvoy Privacy Policy

• Storage — to keep your pairing token, the app URL, and the local recently-seen-posts list on your device
• Access to x.com / twitter.com — to read the post you choose so we can draft a reply, and to show the reply controls on the page. The extension runs only on these sites.

• Click Disconnect in the extension to remove your token and stop all data sending
• Revoke the extension token any time from Postvoy → Settings → Browser Extension
• Uninstall the extension to remove all locally stored data

Postvoy and this extension are not directed to children under 13 (or the minimum age in your jurisdiction) and are intended for business use by account holders.

We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, announced in the Postvoy app.

Questions about this policy or your data: email support@postvoy.com.