Privacy Policy

Fairyx (“we”, “our”) operates the Fairyx sales intelligence platform accessible at fairyx.app and the Fairyx Chrome extension available on the Chrome Web Store. This policy explains what data we collect, why we collect it, and how we protect it.

2.1 Account data

When you sign up we collect your email address (used for magic-link authentication only). We do not store passwords.

2.2 X (Twitter) profile data

The Fairyx Chrome extension reads publicly visible data from X.com pages you visit while the extension is active, including:

• Public profile information (display name, bio, follower count, location).
• Public tweets and engagement metrics visible on profile pages.
• Public search results and user lists.

This data is sent to our API and stored in your Fairyx account as CRM lead records. We do not access private or restricted X content.

2.3 Outreach actions (Controlled Send mode)

If you enable Controlled Send (opt-in, off by default), the extension may post comments or send DMs from your X account only after you explicitly approve each action in the Fairyx web app. We log the action type, target handle, timestamp, and outcome. Hard daily limits of 20 comments and 10 DMs per account are enforced and cannot be overridden.

2.4 Usage data

We collect basic server-side logs (request timestamps, error codes) to operate and improve the service. We do not use any third-party analytics SDKs inside the Chrome extension.

2.5 Cookies & website analytics

On the fairyx.app website (not the extension) we use Google Analytics to understand aggregate usage and improve the product. Google Analytics sets cookies and collects data such as pages visited, approximate location, device, and browser.

These analytics cookies load only after you accept them in our cookie banner. We use Google Consent Mode, so until you accept, no analytics cookies are set and no analytics data is collected. You can decline, and you can change your choice later by clearing the cookie_consent value in your browser storage. Strictly necessary cookies required to keep you logged in are always active.

• To provide the CRM, lead-research, and AI-strategy features you request.
• To enforce safety limits and log outreach actions for your review.
• To authenticate you and maintain your session.
• To detect and respond to abuse, spam, or policy violations.
• We do not sell, rent, or share your data with third-party advertisers.

We share data only with the following categories of sub-processors necessary to operate the service:

• Railway (infrastructure): hosts our API and PostgreSQL database.
• Anthropic (AI): we send lead-profile text to Claude to generate strategy and message drafts. No personally identifiable information beyond the public X profile is included.
• Email provider: used solely to send magic-link login emails.
• Google Analytics: website usage analytics, loaded only after you accept analytics cookies. See section 2.5.

We may disclose data if required by law or to protect our legal rights.

Lead records and outreach logs are retained for as long as your account is active. You can delete individual leads from the CRM at any time. To request full account deletion email privacy@fairyx.app and we will delete all your data within 30 days.

All data is transmitted over HTTPS. API tokens issued to the Chrome extension are scoped per X account and can be revoked from the Fairyx settings page. Task payloads sent to the extension are signed with Ed25519 to prevent tampering.

The extension requests the following permissions and uses them as described:

• storage: saves your settings and daily quota counters locally.
• activeTab / tabs / scripting: injects scripts to read public X.com page data and, in Controlled Send mode, interact with X UI elements on your behalf.
• alarms: schedules periodic polling for pending tasks.
• downloads: exports discovered leads to CSV/JSON files on your machine.
• clipboardWrite: pastes approved message text into X compose boxes during Controlled Send actions.
• system.display: reads screen dimensions to position the profile-enrichment popup window correctly.

When you have X.com open, the extension may periodically open a background tab (not focused) to refresh lead tweet data automatically. This tab is closed after each sync. You can trigger a manual refresh at any time from the Fairyx feed page.

Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data. To exercise these rights contact privacy@fairyx.app.

We may update this policy from time to time. Material changes will be announced via the Fairyx web app. Continued use after the effective date constitutes acceptance.

Questions about this policy? Email privacy@fairyx.app or visit fairyx.app.