XFacter Privacy Policy
Last updated: June 9, 2025
Introduction
XFacter is a Chrome extension that provides AI-powered fact-checking for social media posts using ChatGPT. This privacy policy explains what information XFacter collects, how it is used, and the choices you have regarding your data. By using the XFacter extension, you consent to the practices described in this privacy policy.
Data Collection
What We Collect
XFacter collects and processes the following data:
- Social Media Post Content: When you click the "Fact Check" button, XFacter reads the content of social media posts on supported platforms (Twitter/X, Reddit, Quora, LinkedIn).
- OpenAI API Key: You provide your own OpenAI API key to use the extension.
What We Don't Collect
XFacter does not collect:
- Personally identifiable information (name, address, email, age, ID numbers)
- Health information
- Financial or payment information
- Personal communications (emails, texts, chat messages)
- Location data
- Web browsing history
- Keystroke logging or other detailed user activity
How We Use Your Data
Social Media Post Content
- Content from social media posts is sent to OpenAI's API for fact-checking analysis.
- This content is processed in real-time and is not stored by XFacter beyond the current session.
- The content is only processed when you explicitly click the "Fact Check" button.
OpenAI API Key
- Your OpenAI API key is stored locally in your browser using Chrome's storage API (chrome.storage.local).
- The key is used solely to authenticate requests to OpenAI's API for fact-checking.
- We never transmit your API key to our servers or any third parties other than OpenAI.
Data Storage
- All data processing happens locally in your browser.
- Your OpenAI API key is stored locally in your browser and persists between sessions.
- Social media post content is temporarily held in memory during the fact-checking process and is not stored permanently.
Data Sharing and Disclosure
Third-Party Service Providers
XFacter uses the following third-party service:
- OpenAI API: We send social media post content to OpenAI's API for fact-checking analysis. This data is subject to OpenAI's privacy policy. We recommend reviewing their privacy policy to understand how they handle your data.
Legal Requirements
We may disclose your information if required to do so by law, regulation, or legal process, such as a court order, subpoena, or government investigation. We may also disclose your information to protect our rights, property, or safety, or the rights, property, or safety of others.
Business Transfers
In the event of a merger, acquisition, sale of assets, or other business transfer, your information may be transferred to the acquiring or successor entity. We will notify you of any such transfer and the applicable privacy policies of the new entity.
Your Rights and Choices
- API Key Management: You can delete your stored API key at any time by clearing the field and clicking "Save" in the extension popup.
- Extension Permissions: You can review and manage the permissions granted to XFacter through Chrome's extension settings.
- Uninstallation: You can uninstall XFacter at any time, which will remove all locally stored data associated with the extension.
Data Security
We implement reasonable security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Storing your API key locally in your browser using Chrome's secure storage API
- Using HTTPS for all communications with the OpenAI API
- Not storing social media post content beyond the current session
However, no security system is 100% secure, and we cannot guarantee the absolute security of your information.
GDPR Compliance
If you are a resident of the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including:
- Right to Access: You can request a copy of the information we have about you.
- Right to Rectification: You can request that we correct inaccurate or incomplete information.
- Right to Erasure: You can request that we delete your information.
- Right to Restrict Processing: You can request that we limit how we use your information.
- Right to Data Portability: You can request that we transfer your information to another service.
- Right to Object: You can object to our processing of your information.
To exercise these rights, please contact us using the information provided in the "Contact Us" section.
We do not sell your personal information to third parties for monetary consideration. The California Consumer Privacy Act (CCPA) gives California residents the right to opt out of the "sale" of their personal information. While we do not sell your information in the traditional sense, we share social media post content with OpenAI for analysis purposes. This sharing is necessary for the core functionality of our extension and is done only with your explicit consent when you click the "Fact Check" button.
Children's Privacy
The XFacter extension is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete the information as soon as possible.
Content Rights
When you use XFacter to analyze social media content:
- We do not claim ownership of the content you analyze.
- The analysis results provided by OpenAI are for informational purposes only.
- You are responsible for how you use the fact-checking results.
Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy in the extension's documentation and updating the version number of the extension. Your continued use of the extension after the effective date of the updated privacy policy constitutes your acceptance of the changes.
If you have any questions about this privacy policy or XFacter's data practices, please contact us at contact.xfacter@gmail.com.