Privacy Policy

This page explains what RocketDrop stores, why, and how to remove it.

What we store about you

• Your X user ID, handle, display name and profile picture, from X when you sign in.
• An access token and refresh token from X, encrypted at rest, so RocketDrop can send DMs you set up. We never receive your X password.
• An email address, if you add one for alerts.
• Your campaigns, plan and billing status. Card details are held by Stripe, not by us.

What we store about your fans

• For a fan who replies to your post with your keyword: their X user ID, handle, display name, the reply text and when it happened.
• The DM sent to them, whether it was delivered, and how many times their tracked link was clicked.
• For each click, a daily changing hash of the visitor's IP address and browser, used to count unique clicks. The raw IP address is never stored.
• If a fan uses the opt out link or replies STOP, a record that they opted out, so they are never messaged from your account through us again.

How we use it

Only to run your campaigns and show you their results. We don't sell data, run ads, or message anyone who didn't reply to your post first.

Who else processes it

• X Corp., through its official API, to send DMs and, before messaging a fan again, to read that conversation for an opt out.
• twitterapi.io, to read public replies to your posts.
• Stripe, for payments. Our hosting provider stores the database.

Removing your data

You can revoke RocketDrop's access at any time in X under Settings, Security and account access, Apps and sessions. To delete your workspace and everything in it, email hello@rocketdrop.app. Anyone who received a DM can opt out using the link in it.