Privacy Policy

This Privacy Policy applies to the xPort browser extension, xPort website, TGX Save account features, APIs, and related support interactions. The data controller is TGX Save.

For privacy questions or rights requests, contact [email protected].

Depending on how you use the Services, we process:

• Account information: your name, email address, profile image, internal user identifier, and Google account identifier when you sign in.
• Authentication information: session tokens, session expiry, provider OAuth credentials supplied to our authentication service, verification records, IP address, and user-agent information.
• Membership and payment information: plan, entitlement, checkout, transaction, refund, and payment status identifiers. Alipay account credentials are processed by Alipay and are not stored by TGX Save.
• Support information: your contact details, messages, attachments, order details, and information you choose to provide when requesting support.
• Technical information: request timestamps, error and security logs, browser and device information, and basic service interaction data needed to operate and protect the Services.

xPort stores extension settings, your TGX Save extension session, export runs, cursor pages, rate-limit state, and exported user records in browser storage, including IndexedDB. Generated XLSX, CSV, and JSON files are saved through your browser.

To perform an export, xPort may read the active X session cookies available to the extension and use them to make requests to X from your browser. X cookies and locally collected relationship records are not sent to TGX Save servers as part of the current export flow.

You control this local data through the extension, browser storage controls, generated-file controls, and by uninstalling the extension. Clearing local data may remove unfinished export progress.

• create and secure your TGX Save account and sessions;
• connect the website and extension login flow;
• verify membership and provide plan features;
• process purchases, billing events, refunds, and support;
• maintain, troubleshoot, measure, and improve the Services;
• prevent fraud, abuse, unauthorized access, and attacks;
• enforce our Terms of Service and comply with legal obligations.

We may disclose limited information to:

• Google, to complete the sign-in flow under Google's own terms and privacy policy;
• Z-Pay and Alipay, to provide checkout, payment confirmation, fraud prevention, refunds, and related payment support;
• Infrastructure providers that host the website, database, network, logs, and security systems under contractual confidentiality and data protection obligations;
• professional advisers, acquirers, or successors where reasonably necessary for legal, audit, financing, or business transfer purposes; and
• authorities or other parties where required by law or reasonably necessary to protect users, rights, and security.

We do not sell personal information or locally exported X relationship records.

Where data protection law requires a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests in operating and securing the Services, comply with legal obligations, or based on consent where consent is requested. You may withdraw consent at any time, without affecting earlier lawful processing.

Account information is generally retained while your account is active. Sessions and verification records expire or are removed according to authentication and security needs. Payment, transaction, tax, and support records may be retained as required for legal, accounting, fraud prevention, and dispute handling purposes.

Browser-local export data remains until you delete it, clear extension storage, or uninstall xPort. You may request deletion of eligible server-side account data by contacting [email protected]. We may retain limited information where required by law or needed to establish or defend legal claims.

We use reasonable technical and organizational safeguards designed to protect information, including secure account sessions, short-lived one-time login tokens, access controls, and protected server storage. No system can guarantee absolute security. You should protect access to your Google account, X account, browser profile, device, and exported files.

Our service providers may process information in countries other than the country where you live. Where required, we rely on appropriate contractual safeguards, adequacy decisions, or other lawful transfer mechanisms.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information, and to request portability or withdraw consent. You may also have the right to complain to a local data protection authority.

You can sign out, uninstall xPort, clear local extension data, manage Google account connections, allow paid access to expire, request an eligible refund, or contact [email protected] to make a request. We may need to verify your identity before completing a request.

The Services are not directed to children, and paid plans are not intended for anyone under 18. We do not knowingly collect personal information from children in violation of applicable law. Contact us if you believe a child has provided information improperly.

We may update this Privacy Policy as the Services and legal requirements change. We will update the effective date and may provide additional notice for material changes.

Contact [email protected] with privacy questions or requests. Our Terms of Service provide additional rules governing the Services.