Privacy policy

What we collect

• Your X profile name, handle, id and picture when you sign in with X. Sign-in tokens are discarded right after reading the profile.
• The content you create: ideas, drafts, versions, comments, templates, images and schedules.
• If you connect an X account for publishing: its access and refresh tokens, encrypted with AES-256-GCM. They are never sent to your browser.
• An email address only if you add and confirm one, for reminders and summaries.
• Operational records: when things were scheduled, published, approved or changed, and by whom, and which requests were made to X for your workspace, so they stay within X's billing limits.

What we do not do

• No advertising trackers, no third-party analytics scripts, no marketing cookies.
• We do not sell data and do not use your writing to train models.
• We do not read your X account beyond what a feature you enabled needs.

Cookies

One strictly necessary session cookie keeps you signed in, and a short-lived cookie protects the X sign-in flow. Your theme choice and unsaved draft backups stay in your own browser storage.

Processors

Hosting on Vercel, database on Neon, email through Resend, image storage on Vercel Blob. No payment processor is used: Pilcrow is free during the beta.

Your choices

Disconnect an X account at any time in Settings; Pilcrow revokes its access at X and deletes the tokens. Delete drafts individually, or delete your account in Settings, which signs you out everywhere and removes workspaces you own. Deleted records are purged after a 30 day recovery window.

Contact

Questions or requests about your data: info@pilcrow.pro.