PostPilot Privacy Policy

Last updated: May 23, 2026

PostPilot is a Chrome extension that scores your X/Twitter posts in real time. This policy explains what data the extension accesses, what it stores, and what it sends over the network.

What data PostPilot accesses

PostPilot reads the following from the X.com page you are viewing:

• The text you are currently composing in the X post composer, in order to score it in real time.
• Your own published posts (tweet text, impression counts, likes, retweets, replies) to train the personalized scoring engine. PostPilot only reads posts attributed to your own account handle — it does not read posts from other users.

What data PostPilot stores

All data is stored locally on your device using chrome.storage.local. This includes:

• Your extension settings and scoring preferences.
• Your license key and a locally generated instance ID (PostPilot Pro only).
• A local dataset of your own past posts and their engagement metrics, used to personalize scoring over time.

None of this data is transmitted to PostPilot or any third party, except as described below.

What data PostPilot transmits

PostPilot Pro sends your license key and instance ID to LemonSqueezy solely to verify that your license is valid. No post content, engagement data, or personal information is included in these requests. LemonSqueezy's privacy policy applies to that interaction.

PostPilot does not operate any servers of its own and does not transmit data to any other third party.

Permissions

PostPilot requests the following Chrome permissions:

• storage — to save your settings and local post dataset.
• host permission for x.com and twitter.com — to inject the scoring overlay into the post composer and read your own post metrics.
• host permission for api.lemonsqueezy.com — to validate your Pro license key.

Data retention and deletion

All locally stored data can be cleared at any time by removing the PostPilot extension from Chrome (chrome://extensions). Uninstalling the extension permanently deletes all stored data from your device.

Children's privacy

PostPilot is not directed at children under 13 and does not knowingly collect data from minors.

Changes to this policy

If this policy changes materially, the "Last updated" date above will be revised. Continued use of the extension after an update constitutes acceptance of the revised policy.

Contact

Questions about this policy can be sent to brianemcgrath@gmail.com.