Skip to content

Privacy Policy

Last updated: February 24, 2026

1. Introduction

XDigestly ("we", "us", "our") operates the XDigestly Chrome extension and the xdigestly.app website. This policy explains what data we collect, how we use it, and your rights regarding your information.

2. Information We Collect

We collect the following information when you use XDigestly:

  • Account information — email address, display name, and password (hashed), collected via email/password registration or Google OAuth.
  • Article data — URLs and content of X (Twitter) Articles you choose to process.
  • Usage data — number of articles processed per month, used to enforce tier limits.
  • Payment information — handled entirely by Stripe. We never store card numbers or payment details on our servers.
  • Extension settings — your reader preferences and configuration stored locally in Chrome extension storage.
  • Bookmarks — articles you save, including title, URL, author, and reading status.
  • Rating feedback — your thumbs-up/down responses to AI quality ratings.
  • RSS feed token — a unique identifier used to authenticate your personal podcast feed.
  • Daily queue preferences — your preferred notification time and timezone for the daily reading email.

3. How We Use Your Information

Your data is used to:

  • Generate AI summaries and TTS audio for articles you process.
  • Manage your account and subscription status.
  • Track monthly usage to enforce tier limits.
  • Generate your personal RSS feed for podcast apps.
  • Improve our services and fix issues.

We do not sell your data or use it for advertising.

4. Third-Party Services

XDigestly relies on the following third-party services, each with their own privacy policies:

  • Google — OAuth authentication and text-to-speech audio generation (Google Cloud TTS). Article text is sent for audio synthesis.
  • MiniMax — AI summaries and quality ratings. Article content is sent to MiniMax for processing.
  • Stripe — Payment processing and subscription management.
  • Supabase — Database and authentication infrastructure.
  • Cloudflare — API hosting and audio file storage (R2).
  • Resend — Transactional email delivery (welcome emails, subscription updates, daily digest).

5. Data Retention

Account data is retained while your account is active. Processed articles and summaries are kept as part of your history. If you delete your account, your data is removed from our systems within 30 days. You can also request deletion at any time by contacting us at contact@xdigestly.app.

6. Data Security

All data in transit is encrypted using HTTPS/TLS. Authentication tokens are stored securely using Chrome's built-in extension storage APIs. We apply industry standard practices to protect your data, but no system is completely immune to risk.

7. Your Rights

You have the right to:

  • Access and review the personal data we hold about you.
  • Correct inaccurate information.
  • Request deletion of your account and data.
  • Export your data in a portable format.
  • Opt out of any non-essential data processing.

To exercise any of these rights, contact us at contact@xdigestly.app.

8. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your personal data under the following legal bases:

  • Contract performance — processing articles, generating summaries, managing your account and subscription.
  • Legitimate interest — improving our service, preventing abuse, and fixing issues.
  • Consent — sending daily digest emails (you can opt out at any time via Settings).

Under GDPR, you also have the right to restrict processing, withdraw consent, and lodge a complaint with your local data protection authority.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell your personal information. To exercise these rights, contact us at contact@xdigestly.app.

10. International Data Transfers

Your data may be transferred to and processed in countries outside of your own, including the United States, where our third-party service providers (Cloudflare, Supabase, MiniMax, Google, Stripe, Resend) operate. These transfers are necessary for providing the service and are protected by the providers' own data protection commitments and standard contractual clauses where applicable.

11. Cookies

We use minimal cookies strictly for authentication purposes. We do not use third-party tracking cookies or advertising cookies.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. Continued use of XDigestly after changes constitutes acceptance of the revised policy.

13. Contact

Questions or concerns about this policy? Reach us at contact@xdigestly.app.