Privacy Policy

1. Introduction

At TweetStream, we take privacy seriously. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with our website, account system, billing flows, APIs, and alert delivery features. It also explains how we handle third-party content made available through the service. This Privacy Policy is incorporated into and subject to our Terms of Service.

2. Information We Collect

We may collect information about you in various ways, including:

• Account and Profile Data: Your name, email address, login provider identifiers, and similar information used to create and maintain your account.
• Configuration Data: Tracked handles, keyword filters, webhook destinations, API key status, referral data, and other settings you configure in the service.
• Billing and Transaction Data: Subscription plan, Stripe customer and subscription identifiers, checkout and invoice events, payment status, and limited anti-abuse data such as hashed card-fingerprint signals derived from Stripe workflows.
• Usage and Technical Data: IP address, browser or device details, session and authentication records, page interactions, API request logs, and operational diagnostics.
• Marketing and Attribution Data: UTM parameters, landing path, click identifiers, email engagement, opt-out status, and similar analytics or lifecycle-marketing data.
• Third-Party Content Data: Posts, account handles, links, media URLs, and related metadata we process from external upstream providers so we can deliver alerts and service functionality.

3. How We Use Your Information

We use the information we collect to:

• Authenticate users and secure accounts
• Provide, maintain, and improve our dashboard, API, WebSocket, and webhook features
• Process subscriptions, billing, anti-abuse checks, and support requests
• Store and apply your tracking configuration, filters, and webhook destinations
• Monitor product usage, attribution, operational trends, and service performance
• Send service, security, lifecycle, and transactional communications
• Investigate abuse, enforce our terms, and protect our systems and provider relationships

4. Sharing Your Information

We may share your information with:

• Service Providers: Third parties that help us operate the service, such as hosting, infrastructure, authentication, billing, analytics, customer communications, and email providers.
• Integrated Destinations and Sources: Third parties involved in delivering configured features or content, such as webhook destinations, source platforms, or upstream data providers, to the extent necessary to operate the service.
• Legal and Risk Events: Courts, regulators, law enforcement, counterparties, or advisers when we reasonably believe disclosure is necessary to comply with law, enforce our terms, protect rights, or reduce legal or security risk.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets.

5. Data Security

We implement reasonable security measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Third-Party Content

TweetStream surfaces content and metadata from X/Twitter and other external sources. Those sources have their own terms, privacy practices, and retention rules. We are not responsible for third-party websites, apps, or content, and this Privacy Policy does not govern how X/Twitter or any upstream provider handles data once you leave our service or interact directly with them.

7. Age Requirements

Our service is intended for individuals aged 18 and over. We do not knowingly collect personal information from anyone under 18 (or under 13 in jurisdictions where COPPA applies). If we learn we have collected personal information from someone under the applicable age threshold, we will delete that information within 30 days. To report a potential violation, please contact us.

8. Your Data Rights

Depending on your location, you may have rights regarding your personal data, including:

• The right to request access to personal information we hold about you
• The right to request correction of inaccurate or incomplete personal information
• The right to opt out of marketing communications
• The right to request deletion where applicable law requires or permits it
• The right to make a complaint to us or an applicable privacy regulator

9. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for session management, attribution, analytics, onboarding, and service operation. Some features may not function properly if you disable them. Where required by law, you are responsible for using any browser or device controls available to you.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the one in which you reside, including countries where our hosting, analytics, billing, communications, and infrastructure providers operate. These countries may have different data protection laws, and we take reasonable steps to require service providers handling personal information on our behalf to do so consistently with applicable legal obligations.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. Your continued use of the service after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

12. Data Retention

We retain personal information for as long as needed to provide the service, maintain security and audit trails, comply with legal, tax, accounting, or contractual obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type. Account and configuration data are typically kept while your account is active, while billing, anti-abuse, operational-log, and marketing records may be kept longer where reasonably necessary or required by law. We may also retain de-identified or aggregated information that no longer reasonably identifies you.

13. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of New South Wales, Australia, consistent with our Terms of Service. Any disputes arising from this Privacy Policy will be subject to the exclusive jurisdiction of the courts of New South Wales, Australia.

14. Contact Us

If you have any questions about this Privacy Policy, want to exercise a privacy right, or want to make a privacy complaint, please contact us at email privacy.