Privacy Policy

This Privacy Policy explains how XSkills (“XSkills,” “we,” “us,” or “our”), based in Los Angeles, California, collects, uses, discloses, and protects personal information when you use xskills.app and the XSkills service. The service is offered in the United States.

Information we collect

Depending on how you use XSkills, we may collect:

• Account information, such as your email address, user identifier, profile settings, timezone, and X username.
• Waitlist information, including the email address you provide and the time you join the waitlist.
• X information, including your X account identity, recent bookmarks imported during setup, newly discovered bookmarks, post text, authors, links, media metadata, and source hashes.
• Skill and review information, including generated drafts and packages, research sources, quality and risk evaluations, approval or rejection decisions, checksums, and install receipts.
• Integration information, such as Telegram account and chat identifiers, delivery preferences, connector device data, selected agent harness, connection status, and encrypted credentials needed to operate connected services.
• Billing information, such as your plan, subscription status, usage allowance, Stripe customer and subscription identifiers, and transaction status. Stripe processes payment-card details and billing addresses; XSkills does not store full payment-card numbers.
• Support and technical information, including messages you send us, request and error records, timestamps, workflow status, model usage, browser or device information, IP address, and performance or analytics data.

Sources of information

We receive information directly from you; automatically when you use the service; from X, Telegram, Stripe, and other services you connect; and from your paired connector or configured agent harness.

How we use information

We use personal information to:

• create and secure your account and connected integrations;
• manage the waitlist and tell you when XSkills onboarding reopens;
• find eligible saved workflows, research them, generate skill drafts, request your approval, and deliver approved packages;
• process subscriptions, enforce plan limits, and prevent abuse;
• provide support, diagnose failures, maintain service reliability, and improve XSkills;
• protect users, XSkills, and connected services and comply with applicable law.

How we disclose information

We disclose information only as needed to operate the service, follow your instructions, protect the service, or comply with law. Service providers and connected services may include Supabase for authentication and databases; Stripe for billing; X for bookmark access; OpenAI for workflow evaluation and compilation; Firecrawl for retrieving supporting sources; Telegram for review messages; Vercel for hosting, analytics, performance monitoring, and workflows; PostHog for privacy-limited product analytics; Sentry for application error monitoring; and your selected connector or agent harness for approved package delivery. OpenAI provider storage is disabled where supported.

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information in connection with a merger, financing, acquisition, reorganization, or sale of all or part of XSkills, subject to appropriate protections.

Tracking choices

XSkills does not use personal information for cross-site behavioral advertising. Product analytics is limited to page journeys and selected lifecycle events; session replay and broad interaction autocapture are disabled. XSkills configures its browser analytics to respect supported “Do Not Track” signals. We do not sell or share personal information for cross-context behavioral advertising. Providers and connected third-party services may process information under their own privacy policies.

Retention and security

We retain information for as long as needed to provide the service, maintain security and business records, resolve disputes, and meet legal obligations. Retention periods vary by the type of information. Account deletion removes your account and associated application data from active XSkills systems, while limited records may remain where a provider or law requires retention. We use administrative, technical, and organizational safeguards, including encryption or keyed hashing for sensitive connection credentials. No system is completely secure.

Your choices and privacy rights

From Settings, you can pause scheduled runs, disconnect integrations, manage billing, send approved packages to your paired Mac, or delete your account. Account deletion first cancels an active subscription and then deletes stored application data associated with your account.

You can ask us to remove your waitlist email by contacting us at the address below.

Depending on applicable law, California residents may have rights to know, access, correct, or delete personal information; to receive information about its disclosure; and to opt out of sale or sharing. XSkills does not sell or share personal information for behavioral advertising. We will not discriminate against you for exercising an applicable privacy right. We may need to verify your identity before completing a request.

Age requirement

XSkills is not directed to children. You must have reached the age of majority where you live and be legally able to enter into a contract to use the service.

Changes to this policy

We may update this policy as the service or legal requirements change. We will post the revised policy here, update its effective date, and provide additional notice when required by law.

Contact us

For privacy requests or questions, email contact@xskills.app. XSkills is based in Los Angeles, California.