PostPilot Privacy Policy

Last updated: August 11, 2026

PostPilot is a Chrome extension that scores your X/Twitter posts in real time. This policy explains what data the extension accesses, what it stores, and what it sends over the network.

What data PostPilot accesses

PostPilot reads the following from the X.com page you are viewing:

• The text you are currently composing in the X post composer, in order to score it in real time.
• Your own published posts (tweet text, impression counts, likes, retweets, replies) to train the personalized scoring engine. PostPilot only reads posts attributed to your own account handle. It does not read posts from other users.

What data PostPilot stores

All data is stored locally on your device using chrome.storage.local. This includes:

• Your extension settings and scoring preferences.
• Your license key and a locally generated instance ID (PostPilot Pro only).
• A local dataset of your own past posts and their engagement metrics, used to personalize scoring over time.

None of this data is transmitted to PostPilot or any third party, except as described below.

What data PostPilot transmits

PostPilot Pro sends your license key and instance ID to LemonSqueezy solely to verify that your license is valid. No post content, engagement data, or personal information is included in these requests. LemonSqueezy's privacy policy applies to that interaction.

PostPilot operates one minimal server, used only to generate AI Rewrite suggestions. When you request a rewrite, the following is sent to that server, which forwards the request to Anthropic and returns the result: the text of the post you're rewriting, either an anonymous device identifier (Free) or your license key (Pro), and — for Pro users who've built a Voice Match profile — a compact summary of your writing style (typical sentence length, common vocabulary, and similar signals; never the raw text of your past posts). This server also tracks how many rewrites each device or license has requested that day, solely to enforce daily usage limits — it does not log or retain post content or voice-style data beyond what's needed to generate the response. Scoring, analytics, and voice-profile storage all remain entirely on your device; only an explicit rewrite request reaches this server.

Outside of LemonSqueezy license validation and the AI Rewrite server above, PostPilot does not transmit data to any other third party.

Permissions

PostPilot requests the following Chrome permissions:

• storage: to save your settings and local post dataset.
• host permission for x.com and twitter.com: to inject the scoring overlay into the post composer and read your own post metrics.
• host permission for api.lemonsqueezy.com: to validate your Pro license key.
• host permission for postpilot-rewrite-worker.brianemcgrath.workers.dev: to generate AI Rewrite suggestions, as described above. (This will move to a postpilotforx.com subdomain in a future update.)

Data retention and deletion

All locally stored data can be cleared at any time by removing the PostPilot extension from Chrome (chrome://extensions). Uninstalling the extension permanently deletes all stored data from your device.

Children's privacy

PostPilot is not directed at children under 13 and does not knowingly collect data from minors.

Changes to this policy

If this policy changes materially, the "Last updated" date above will be revised. Continued use of the extension after an update constitutes acceptance of the revised policy.

Contact

Questions about this policy can be sent to brianemcgrath@gmail.com.