1. Overview
This Privacy Policy explains what information CalledIt ("we", "us") collects, how we use it, and your choices. It covers two kinds of data: information about you (our account holders) and public information about X accounts we analyze (who may not be users).
2. Information about account holders
- Email address — to create your account, sign you in, and send alerts you opt into.
- Authentication — a hashed password (if you set one) and a signed session cookie. We never store passwords in plain text.
- Billing — handled by Stripe. We receive a customer/subscription identifier and your plan/credit status, but we do not collect or store your full card number; Stripe does, under its own privacy policy.
- Usage — basic event logs (e.g. searches run, sign-ins) used to operate the Service and prevent abuse.
3. Information about analyzed X accounts
When you (or another user) analyze a handle, we retrieve and store, via the official X API, that account's public posts, display name, bio, profile image, and follower count, and we compute performance metrics from them. This data is public on X and is used solely to produce CalledIt's accountability metrics. It is retrieved and used subject to the X Developer Agreement & Policy.
If you are (or represent) an analyzed account and want to be removed or corrected, see §8.
4. How we use information
- To provide the Service: run analyses, build the leaderboard, profiles, and portfolios.
- To process payments and manage credits (via Stripe).
- To send the email alerts you enable, and account/service messages.
- To secure the Service, enforce quotas, and prevent abuse.
We do not sell your personal information, and we do not use it for credit, insurance, eligibility, or surveillance purposes.
5. Who we share with (processors)
- Stripe — payments.
- X / Twitter API — source of public post data.
- EODHD — market price data.
- Anthropic (Claude) — classifies post text into structured calls.
- Resend — sends magic-link and alert emails.
We share only what each provider needs to perform its function. We may disclose information where required by law.
6. Cookies
We use a single signed session cookie to keep you logged in. We do not use third-party advertising or cross-site tracking cookies.
7. Retention & deletion
We keep account data while your account is active. Cached X content is kept consistent with its current state on X: when a post or account is deleted, changed, suspended, or made private on X, we remove or update our stored copy as soon as reasonably practicable, and within 24 hours of a verified request from X or the account owner. You can ask us to delete your account and associated personal data at any time (§8).
8. Your rights & "remove me"
You may request access to, correction of, or deletion of your personal data by emailing [email protected]. Analyzed X accounts: if you want your handle removed from CalledIt or a metric corrected, email the same address — we honor verified requests from X account owners.
Depending on where you live, you may have rights under the CCPA/CPRA (California) — including the right to know, delete, and opt out of "sale" (we do not sell personal information) — or the GDPR/UK GDPR (EU/UK), including access, rectification, erasure, and objection. We will honor applicable requests.
9. Children
The Service is not directed to anyone under 18, and we do not knowingly collect data from children.
10. Changes & contact
We will update this page and the "Last updated" date when this policy changes. Questions or requests: [email protected].