Privacy Policy

This Privacy Policy explains how Wrkcraft ("we", "us", or "our") collects, uses, and protects your information when you use the Wrkcraft service at wrkcraft.com ("Service").

1. Information We Collect

From X (Twitter) OAuth: When you connect your X account, we receive your X user ID, username, display name, profile photo, and OAuth access tokens. We store tokens to publish posts and fetch performance data on your behalf.

Content you provide: Topics, writing samples, voice profile data, post drafts, edits, and preferences you configure inside the Service.

Usage data: Pages visited, actions taken, timestamps, and feature usage within the Service.

Post performance data: Impressions, likes, replies, and other engagement metrics fetched from the X API for posts published through Wrkcraft.

2. How We Use Your Information

• To authenticate you and maintain your account session
• To generate, schedule, and publish posts and replies on X on your behalf
• To build and improve your AI voice profile over time
• To analyze your content performance and surface actionable insights
• To send alerts and notifications you have configured
• To improve the Service and train internal models (using anonymized, aggregated data only)

3. X API Data

We access the X API solely to provide features you have authorized. We do not sell, share, or use X user data for advertising purposes. Our use of X data complies with X's Developer Agreement and Policy.

4. AI Processing

To generate posts and replies, your voice profile data and topic instructions are sent to Anthropic's Claude API. This data is processed solely to generate content for you and is not used to train Anthropic's models. Anthropic's privacy policy applies to data processed through their API.

5. Data Storage and Security

Your data is stored in a managed PostgreSQL database. We use industry-standard security practices including encrypted connections (TLS), access controls, and regular backups. No system is 100% secure, and we cannot guarantee absolute security of your data.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal reasons.

7. Sharing of Information

We do not sell your personal data. We share data only with:

• X Corp — to publish content and read metrics via the X API
• Anthropic — to generate AI content via the Claude API
• Infrastructure providers — hosting and database services that process data on our behalf under confidentiality agreements
• Law enforcement — when required by applicable law

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Revoke X OAuth access at any time through X's connected apps settings

To exercise any of these rights, contact us at hello@wrkcraft.com.

9. Cookies

We use a single session cookie to keep you logged in. We do not use third-party tracking cookies or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Email us at hello@wrkcraft.com.