TwitterShots

Privacy Policy

Last updated: October 9, 2026

Summary Introduction

TwitterShots is operated by SpeedSound, LLC ("Company," "we," "us," "our"). This policy explains how we collect, use, and protect information when you use our website, APIs, remote MCP server, and ChatGPT plugin.

  • We do not sell your personal data. We share data with service providers and connected clients as described below.
  • We are committed to data minimalism, collecting only the essential information required for our service.
  • X authorization login is designed to ensure service quality and user experience, and we will not abuse any access rights.
  • All your personal information is securely stored and transmitted using modern encryption technologies.
  • We use service providers for authentication, hosting, storage, and analytics as described below.
  • Users always have complete control and the right to know about their personal data.
  • We promise operational transparency and welcome users to understand how their data is used at any time.
  • Product-related communications will strictly follow user preferences and never harass users.
  • We continuously update security protocols to protect users from potential data risks.

Table of Contents

  • Definitions
  • Types of Data Collected
  • Purpose of Data Collection
  • Data Protection Commitments
  • User Rights
  • Account Deletion
  • Communications and Notifications
  • Contact Us
  • Policy Updates

Definitions

  • Service: Refers to the TwitterShots website, APIs, remote MCP server, ChatGPT plugin, and related applications
  • User: Individuals using our service
  • Personal Information: Data that can identify an individual

Types of Data Collected

Personal Information You Provide to Us

We currently support login via Gmail and X (formerly Twitter). During this process, we may collect:

  1. Basic profile information (such as name, email address)
  2. Unique user identifiers
  3. Public basic profile information
  4. Payment Information. If you make a payment on our Services, your payment-related information is collected by our third-party payment processor(we use Stripe) on our behalf.

MCP Server and ChatGPT Plugin

When you connect an MCP client or the ChatGPT plugin, we process your TwitterShots account identifier and the OAuth permissions you approve. To check quota or create a screenshot, we look up active API keys linked to your account and process usage and quota information. A screenshot request includes the public X/Twitter post URL or ID and your selected theme and aspect ratio. We return the generated screenshot URL, post ID, and available quota information to the connected client. Generated image URLs are publicly accessible; anyone with the URL may be able to view the image.

Your MCP client or ChatGPT may process the prompts you send and the tool results it receives under its own privacy policy. TwitterShots does not receive your entire conversation through these tools; it receives the tool inputs needed to perform the requested action. We process technical request data and operational logs to authenticate requests, deliver the service, enforce limits, and diagnose failures.

Usage Analytics

  1. Access time and duration of visits
  2. Page browsing records and navigation patterns
  3. Click-through rates and user interactions
  4. Feature usage statistics

Technical Data

  1. Approximate location (city/region level)
  2. Referrer URLs (the website you came from)
  3. HTTP headers and request information
  4. Error logs and debugging information
  5. Information from Cookies. We and our third-party partners may collect information using cookies.

Communication Data

  1. Support ticket conversations
  2. Feedback and survey responses
  3. Email interaction data (open rates, click rates)

Purpose of Data Collection

We collect data solely for the following purposes:

  1. Providing and improving the service
  2. Notifying service changes via email
  3. Providing customer support
  4. Personalizing user experience
  5. To facilitate transactions and payments

Data Protection Commitments

No Sensitive Information Collection

  • We do not process sensitive personal information
  • We may receive account information from authentication providers and public post data needed to create requested screenshots

Data Security

  • We use industry-standard security measures to protect your data
  • Your personal information will not be sold or leased to any third party
  • We share information with service providers as needed to operate the Service and with connected clients when you request a tool result

Third-Party Authorization Login

When you log in using Gmail or X with Auth0:

  • We only obtain basic authorization information
  • We will not store your login credentials
  • We will not access your private messages or non-public information

Disclose the Personal Information We Collect

  • Auth Providers

    We use Auth0 as our user authorization and login service provider. All login information is also retained in their system, and this data is stored in the United States ("U.S.").

    Auth0 privacy policy

  • MCP Hosting

    Our remote MCP server runs on Cloudflare. Its requests are authenticated through Auth0, and screenshot generation uses the TwitterShots API and its hosting services. See the Cloudflare privacy policy.

  • AI Service Providers

    We use OpenAI's translation API to provide AI-powered translation services. When you use the translation feature, your tweet content will be processed by OpenAI's language models.

    OpenAI privacy policy

  • Analytics Providers

    We use analytics services such as Google Analytics/Mixpanel to collect and process certain analytics data. These services may also collect information about your use of websites, You can learn more about Google's practices and Mixpanel privacy by visiting:

    Google privacy policy
    Mixpanel privacy policy

  • Data and Services

    We use Supabase as our data storage service provider, so these data services also collect information about your use of websites. This website is hosted and deployed on Vercel's Functions, and these regions on Vercel's network where Vercel Functions are located may change.

    Supabase privacy policy
    Vercel privacy policy

  • Payment Services

    We use Stripe as our payment service provider, so your data during payment and subscription/billing/unsubscription processes will also be shared and stored on their services. We will not disclose or share any data generated during your payment process with any other third parties.

    Stripe privacy policy

User Rights

As a user, you have the right to:

  1. View the personal information we collect
  2. Request deletion of your personal information
  3. Revoke access to our service at any time

Account Deletion

You may request deletion of your account and personal data at any time:

  1. Submit a request at /settings/profile
  2. Or email support@twittershots.com

We process requests within 1–2 business days and confirm by email. Deleted data cannot be recovered.

Communications and Notifications

After creating an account, you will receive welcome emails, product updates, and service-related notifications. These communications are necessary for us to provide the Service.

For non-essential marketing emails, you may unsubscribe at any time using the “Unsubscribe” link at the bottom of the email.

Policy Updates

We may update this privacy policy from time to time. Significant changes will be notified to users via email.

Contact Us

If you have any questions about this privacy policy, please contact us through: