Your data
What we store, what we never see, and what deleting something actually deletes.
How do I delete my data?
Disconnecting an account removes its stored credential immediately and cancels anything still scheduled to it. Deleting a project removes its posts, receipts, metrics and audit trail with it.
To delete your whole user account: My account → Security → Delete my account, confirmed by typing your email. It removes every project you own with its connected accounts, posts, receipts, API keys and seats, and cancels your subscription. Nobody to ask, nothing to argue about.
Rather someone did it for you? Email support@xpost.to and it's done.
One thing worth being clear about: deleting something in xpost never deletes it from the social platform. A published post stays published until you remove it there.
What do you actually store?
The short version: your posts and their delivery records, the pictures and videos you upload, the encrypted tokens the platforms give us so we can post on your behalf (for Bluesky, the encrypted app password you created there), the engagement numbers we read back, and a log of what was done — including each API and MCP call, kept for 30 days. Not your social passwords — we never see them.
The privacy policy is the long version, and it's written to be read rather than survived.
Still stuck? Ask a person.
Email support@xpost.to. If it’s about a post that went wrong, the fastest thing you can send is the link to it from Posts → Needs you — that page already has the platform’s own error text on it.
Building on the API or wiring up an agent? The developer docs go deeper than these pages do.