Privacy Policy
Last Updated: November 30, 2025
The "Zero-Knowledge" Promise
X Lead Scraper V2 is architected as a local-first application. Unlike cloud scrapers, we do not process, store, or view the data you extract. Your API keys, tokens, and lead lists never leave your machine.
1. Application Architecture & Data Isolation
We differentiate between data regarding Use of the Website (marketing) and Use of the Software (the tool).
- Local Processing: The Software runs locally on your device. All data extraction, parsing, and storage occur on your local hard drive. We do not have a backend database of your leads.
- API Credentials: Your X (Twitter) API keys, OAuth tokens, and cookies are stored securely on your local device. They are never transmitted to our servers.
- No Proxying: Network requests to X/Twitter are made directly from your IP address (or your configured proxies). We do not tunnel your traffic.
2. Information We Do Collect
We minimize data collection to the absolute essentials required for transaction fulfillment and license verification.
A. License Verification
When you activate the software, we transmit your License Key to our licensing provider (Gumroad API) to validate your purchase. This process logs:
- Your IP address (for fraud prevention).
- The timestamp of activation.
- The device "fingerprint" (to enforce single-user limits).
B. Payment Information
We do not process or store your credit card information. All payments are handled by our Merchant of Record, Gumroad, Inc. Please review Gumroad's Privacy Policy.
3. Your Responsibilities as a Data Controller
Because the software runs locally, you are the Data Controller of any data you extract. We act merely as the provider of the tool (the Data Processor). It is your sole responsibility to:
- Comply with GDPR, CCPA, and CAN-SPAM acts regarding the storage and use of personal data (e.g., email addresses).
- Respect the Terms of Service of any platform you interact with.
- Ensure you have a lawful basis for contacting any leads generated via the tool.
4. Third-Party Services
The Software interacts with third-party APIs based on your commands. Data exchanged with these services is subject to their respective policies:
- X (Twitter): Interactions are governed by their Privacy Policy and Terms.
- Enrichment APIs: If you export data to third-party enrichment tools (e.g., Hunter, Apollo), that data is subject to their policies.
- Gumroad: For license validation and payment processing.
5. Website Analytics
On our marketing website (`xleadscraper.com`), we use privacy-focused analytics (like Netlify Analytics) to measure traffic trends. We do not use "pixel" tracking that shares your data with advertising networks (e.g., Meta Pixel).
6. Contact & Data Requests
Since we do not store your scraped data, we cannot delete it for you—it is on your computer. For questions regarding your purchase data or license status, please contact:
support@xleadscraper.com