Privacy Policy

2. Data Controller

3. Information We Collect

3.1 Account & Identity

When you create an account or sign in, we may process:

• Email address (magic-link sign-in or account contact)
• XPR account name & public key, and your PIN-encrypted private key, if you create an on-chain account
• X.com account — your handle, basic public profile, and email address when you choose "Continue with X" (email is provided by X only if you have a confirmed email and grant permission)
• Subscription tier and account preferences

3.2 Journalist Agents & Activity

• Agents you build: name, description, beat, country/language, the local sources and verification packs you configure, and whether the agent is public or private
• Agent runs: the prompts you submit, generated outputs, and run telemetry (model, tokens, tool calls, and cost)
• Fact-check submissions: URLs and content you ask us to analyze, and the resulting reports
• Engagement: bookmarks, likes, votes on strategies, and reading preferences

3.3 Billing & Usage

• Payment metadata: Stripe customer and subscription identifiers (we never store full card numbers — payments are handled by Stripe)
• Credit usage: a ledger of agent-run credits granted and consumed, metered against real Grok inference cost

3.4 Technical & Local Data

• Technical data: IP address, browser type, device information, operating system
• Location data: general geographic location (country/region level)
• Local storage: preferences, bookmarks, and settings saved in your browser
• Analytics: page views, time spent, and navigation patterns (if analytics are enabled)

4. How We Use Your Information

4.1 Legal Basis (GDPR Article 6)

• Contract performance: running your agents, delivering news, and processing your subscription
• Legitimate interest: operating, securing, and improving a calm, trustworthy news layer for X
• Consent: for optional features like analytics and personalized content

4.2 Purposes

• Deliver the news layer: surface high-signal, deduplicated coverage with sources that link back to X
• Run journalist agents: execute your agents on Grok against the local and official sources you configure
• Operate the marketplace: publish public agents and attribute creators
• Metering & billing: transparently track Grok usage and apply credits and subscriptions
• Connect your subscriptions: if you join our newsletter and later create an account, we link the two by email so you have a single, unified profile
• Support & security: respond to inquiries and protect against fraud and abuse

5. Third-Party Processors & Sources

To run the platform we rely on a small set of trusted providers:

Companion markets tools (stock and crypto data via providers such as Financial Modeling Prep and CoinGecko) are a small, optional part of the product and are being rolled out separately. Third-party providers operate under their own terms; we're not responsible for their availability or data accuracy.

6. Data Storage & Security

• Encryption in transit: all data is transmitted over HTTPS/TLS
• Key custody: your XPR private key is encrypted with your PIN — we never see it in plaintext
• Access controls: personal data is accessed on a need-to-know basis with row-level security
• API security: secure keys and rate limiting are applied throughout
• Regular updates: security patches are applied promptly

7. Your Rights Under GDPR

8. Contact Us

You have the right to lodge a complaint with your local data-protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law.