XPatla

Privacy Policy

Last updated: 10 July 2026

X data-processing update

As of July 10, 2026, new X account connections, X data retrieval, publishing to X and third-party X data calls are disabled. No new X data is collected for these purposes after that date. Data lawfully processed before then remains subject to this policy's retention, deletion and access provisions.

1. Introduction

XPatla is operated by FAST AI LABS LTD, registered in England and Wales under company number 16054440. This policy explains how we process, share, retain and protect personal data when you use our services.

2. Data We Collect

We collect the following data:

  • Account Information: Email address, username and account preferences
  • Historical X Account Information: X identifiers, public profile/posts, and connection data previously supplied before X integration was retired; no new X connections or X data collection are available
  • Content Information: Prompts, sources, style data and AI-generated drafts submitted or created through the service
  • Usage and Transaction Information: Credit activity, feature usage, support records, subscription and billing metadata
  • Technical Data: IP address, browser and device information, security and error logs, and cookie preferences

3. Data Processing Purposes

  • To provide the available user-controlled content-drafting features and support
  • To manage accounts, credits, subscriptions and payments
  • To provide security, abuse prevention, troubleshooting and support
  • To improve service quality using analytics where permitted by user preferences
  • To comply with legal obligations and manage legal claims

4. Third-Party Services

We use the following third-party services to deliver our services:

  • Clerk: Authentication and user management
  • Supabase: Database, file storage and application infrastructure
  • Stripe: Payments, subscriptions and fraud prevention
  • X: Historic user-authorised connections and public X data processed before 10 July 2026; no new X connection or data call is made
  • OpenRouter and AI model providers: AI analysis and content drafting requested by the user
  • Google AI: AI analysis and content generation where used
  • Resend: Transactional email and support communications
  • Cloudflare: Network security, traffic routing and performance

Providers process only the data needed for their relevant service. Data may be processed outside Turkey or the United Kingdom, subject to a valid transfer mechanism under applicable data protection law. Merely using the service is not treated as explicit consent.

5. Artificial Intelligence and Data Usage

XPatla uses artificial intelligence technology to generate personalized content:

  • Public X posts previously processed and sources you provide directly may be used for stored style context; no new X data is retrieved
  • Prompts, source text and necessary account context may be sent to the selected AI provider
  • AI outputs are drafts and remain subject to user review and control before publication
  • Private messages are not sent for new AI processing through the retired DM feature

You may contact [email protected] for information about a specific provider and processing purpose.

6. Cookies

We use the following cookies on our website:

  • Essential Cookies: Session management, security
  • Functional Cookies: User preferences, active account selection
  • Analytics Cookies: Service usage statistics

7. Data Security

We implement industry-standard security measures to protect your data. These include SSL/TLS encryption, secure data storage, and regular security audits. However, no data transmission over the internet is 100% secure.

8. Your Data Protection Rights

You have the following rights:

  • Right of Access: You can request a copy of your data
  • Right to Rectification: You can request correction of inaccurate data
  • Right to Erasure: You can request deletion of your data
  • Right to Data Portability: You can transfer your data to another service
  • Right to Object: You can object to data processing

To exercise these rights, you can send an email to [email protected].

9. Data Retention

We retain data only for as long as needed to operate the account and service, maintain security, resolve disputes and meet legal obligations. Active product data is normally deleted or anonymised within 30 days after account deletion, while billing, payment, fraud-prevention, backup and legal records may be retained for the applicable mandatory period.

10. Policy Changes

We may update this policy. Material changes apply prospectively and will be notified in-app or by email where appropriate. Separate consent will be requested for new processing where consent is the required legal basis.

11. Contact

Company: FAST AI LABS LTD (company no. 16054440)

Registered office: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF, United Kingdom

Web: fastailabs.com

Email: [email protected]