Version 2026-10-15.3 · Last updated: 2026-10-15
This policy covers the "X Operator Assistant" Chrome extension (the "Extension") and its server at api.x-operations.org (together, the "Service"). "We" means the developer and operator of the Extension. By clicking to agree to this policy and using the Service, you acknowledge and accept it.
Contact: tianqianhao666@gmail.com.
| Information | When | Purpose | Basis |
|---|---|---|---|
| Email address | When you sign in with Google or an email code | Identify your account, send sign-in codes, apply usage quotas, support | Performing the service |
| Name, Google account identifier | Only when you sign in with Google (provided by Google) | Identify your account and avoid duplicates | Performing the service |
| Random device identifier | At sign-in; a random string generated locally by the Extension | Stop one computer from claiming free trials repeatedly; abuse prevention | Legitimate interest (abuse prevention) |
| Usage records | Each AI call | User ID, feature, model, token counts, latency and success status — to enforce quotas, diagnose problems and account for costs | Performing the service; legitimate interest |
| Subscription information | When you buy a paid plan (sent to us by Creem) | Creem customer ID, subscription ID, plan type, status and expiry — to activate or end paid benefits and handle refunds | Performing the service |
| Consent record | When you click to agree to this policy and the Terms | The version and time of the terms you accepted, as proof of consent | Legal obligation; legitimate interest |
| AI request content (text you submit) | When you use AI features | Forwarded to third-party AI models to generate your result. Our server does not store or log this content. | Performing the service |
We do not collect: your Google password, your X (Twitter) password or login credentials, your email, Drive or other Google data, your precise location, or card numbers and other payment card details (payment happens on Creem's page).
The following is stored in your browser's local storage (chrome.storage) and is not uploaded to our server: drafts and version history, personas, inspiration bookmarks, contacts and tags, tracked accounts and snapshots, mutual-follow scan results, reminders and settings. Uninstalling the Extension or clearing browser data deletes it, and we cannot recover it for you.
The Extension reads content on x.com pages you open (such as posts, replies, follower/following lists and profiles) and adds buttons to the page. This content is processed locally in your browser only, for the features you use. Text is sent to our server only when you actively submit it to an AI feature (see section 2).
| Permission | Purpose |
|---|---|
| storage / unlimitedStorage | Save your data locally (large follow lists need more space) |
| sidePanel | Show the main interface in the side panel |
| tabs | Find and work with your open x.com tabs (read page data, open profiles) |
| alarms, notifications | Scheduled-post reminders and mutual-check alerts |
| contextMenus | Right-click shortcuts on x.com |
| identity | Complete sign-in through a Google pop-up |
| Access to x.com / twitter.com | Read content and add feature buttons on X pages |
| Access to api.x-operations.org | Sign in, check quota and call AI features (this is the only server address) |
We do not sell or rent your personal information, and we do not use it for advertising or profiling. We ourselves do not use your content to train models.
The Extension's use and transfer of information received from Google APIs (limited to your email, name and account identifier) adheres to the Google API Services User Data Policy, including its Limited Use requirements. This information is used only to identify your account and provide the Service, never for advertising.
To the extent permitted by applicable law you may: access the information we hold about you, correct inaccurate information, request deletion of your account and related data, withdraw consent, object to or restrict certain processing, obtain a copy of your data, and lodge a complaint with your local data-protection authority.
To exercise these rights, email tianqianhao666@gmail.com from the address you signed in with so we can verify your identity. We will respond within a reasonable time (generally within 30 days). After you withdraw consent you can no longer use the AI features that require sign-in; withdrawal does not affect processing already carried out.
Our server and database run on Cloudflare's global network, so your information may be processed outside your country or region. Third-party AI providers may be located in other countries or regions. We choose providers with reasonable security but cannot control how they handle data (see section 5).
All data in transit is encrypted with HTTPS. AI keys, session secrets and email-delivery keys are stored only on the server and never appear in the Extension. Sign-in sessions use signed tokens that expire after 30 days, and sign-in and code requests are rate-limited to prevent abuse. No system is perfectly secure; if an incident that may affect your data occurs, we will notify you as required by law.
The Service is not directed at children under 13 and we do not knowingly collect their personal information. Minors should use it with a guardian's consent and guidance. If you are a guardian and believe a child has given us personal information, contact us and we will delete it.
We may update this policy and will change the version and date at the top. For material changes affecting your rights, you must click to agree again in the Extension before you can continue using AI features.
For any privacy question, request or complaint: tianqianhao666@gmail.com.