X · Privacy & Data
X privacy & data
Read from X's own page on 2026-11-10. 25 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
value: both
the data controller responsible for your personal data is X Corp.Read from X's own page on 2026-11-10
Data categories
category: identifying
a display name (for example, “Creators”); a username (for example, @XCreators); a password; an email address or phone number; a date of birthRead from X's own page on 2026-11-10
category: financial
payment information, including your credit or debit card number, card expiration date, CVV code, and billing addressRead from X's own page on 2026-11-10
category: location
we collect some information about your approximate location to provide the service you expectRead from X's own page on 2026-11-10
category: device
Information about your device and its settings, such as device and advertising ID, operating system, carrier, language, memory, apps installed, and battery level.Read from X's own page on 2026-11-10
category: biometric
Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes.Read from X's own page on 2026-11-10
category: behavioral
We collect information about your activity on X, including: Posts and other content you postRead from X's own page on 2026-11-10
category: communication
the contents of the messages, the recipients, and date and time of messagesRead from X's own page on 2026-11-10
category: professional
a professional category, and may provide us with other information, including street address, contact email address, and contact phone numberRead from X's own page on 2026-11-10
Purposes
purpose: Operate, improve, and personalize services
We use the information we collect to provide and operate X products and services.Read from X's own page on 2026-11-10
purpose: Safety and security
We use information we collect to provide for the safety and security of our users, our products, services, and your account.Read from X's own page on 2026-11-10
purpose: Advertising
We use your information to provide our advertising and sponsored content services subject to your settingsRead from X's own page on 2026-11-10
purpose: AI model training
We may use the information we collect and publicly available information to help train our machine learning or artificial intelligence models for the purposes outlined in this policy.Read from X's own page on 2026-11-10
purpose: Research
We use information you share with us, or that we collect to conduct research, surveys, product testing, and troubleshootingRead from X's own page on 2026-11-10
Retention
scope: Communicationsperiod: up to 18 months
we will keep information about the communication and its content for up to 18 monthsRead from X's own page on 2026-11-10
scope: Cookies and cookie-collected informationperiod: up to 13 months
We keep cookies and information collected using cookies for up to 13 months.Read from X's own page on 2026-11-10
scope: Ad views and interactionsperiod: up to 12 months
We keep information about your views or interactions with ads on or off X, as well as how you interact with our content on third-party sites for up to 12 months.Read from X's own page on 2026-11-10
scope: Partner-shared informationperiod: up to 12 months
We keep information shared by ad and business partners for up to 12 months.Read from X's own page on 2026-11-10
scope: Account deactivation restore windowperiod: up to 30 days
For up to 30 days after deactivation it is still possible to restore your X accountRead from X's own page on 2026-11-10
Residency
The page states nothing on this.
International transfers
mechanism: SCC
rely on standard contractual clauses (SCCs), where applicable, to ensure your data rights are protected.Read from X's own page on 2026-11-10
mechanism: DPF
X is a participant in the EU-US Data Privacy Framework (DPF), the Swiss-US DPF and the UK Extension to the EU-US DPF.Read from X's own page on 2026-11-10
Subprocessors
Data processing agreement
Deletion
route: Deactivate account via instructions; data queued for deletion
If you follow the instructions here , your account will be deactivated and your data will be queued for deletion.Read from X's own page on 2026-11-10
Data subject rights
right: Portability
You can download a copy of your information, such as your posts, by following the instructions here .Read from X's own page on 2026-11-10
right: Objection, restriction, or withdrawal of consent
5.3 Objecting to, restricting, or withdrawing your consent. You can manage your privacy settings and other account features here .Read from X's own page on 2026-11-10
right: Complaint to supervisory authority
you have the right to do so with your local supervisory authority.Read from X's own page on 2026-11-10
Sale or sharing
The page states nothing on this.
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page