Privacy Policy

Last Updated: September 30, 2026

This Privacy Policy explains how BELONOGOVA ALEXANDRA (“we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you access or use #gtm, including our website, software, tools, and related services (collectively, the “Service”).

The Service provides tools designed to help users discover relevant conversations and communities on X, create and manage engagement campaigns, generate replies, and perform user-configured actions through connected X accounts.

#gtm is an independent service and is not affiliated with, endorsed by, sponsored by, or officially associated with X Corp.

1. Data Controller

The data controller responsible for personal data processed through the Service is:

BELONOGOVA ALEXANDRA Tiraspol, Moldova Email: gtm@belonix.xyz Website: https://gtm.belonix.xyz/

For privacy questions or requests, you can contact us at the email address above.

2. Information We Collect

We collect and process information necessary to provide and operate the Service.

2.1 Account Information

When you create a #gtm account, we collect your email address.

Your email address is used to create and maintain your account, communicate with you regarding the Service, provide support, and manage account-related functionality.

2.2 X Session Authentication Data

When you connect an X account to #gtm, we process session authentication credentials associated with that account, including:

auth_token
ct0

These credentials are necessary for the Service to interact with the X account you choose to connect.

We do not require or store your X password.

These session credentials may technically allow the Service to perform actions through your connected X account. We use them only to provide functionality that you configure or enable through #gtm.

2.3 Campaign and Service Data

We store information created or generated through your use of #gtm, which may include:

campaigns;
keywords and targeting settings;
prompts and instructions;
generated or edited replies;
CTA settings and variants;
campaign configuration;
Manual Review decisions;
Autopilot settings;
activity history;
usage information;
account settings;
technical and service logs associated with your use of #gtm.

This information is associated with your #gtm account and may remain stored until your account or the relevant information is deleted.

2.4 Public X Content

To provide discovery, targeting, campaign, and reply functionality, the Service may process publicly available information from X, including public posts, replies, profiles, communities, engagement information, usernames, and other publicly available account information.

Such information is processed only as necessary to provide the relevant Service functionality.

Where publicly available X content becomes part of your campaigns, generated replies, or activity history, it may be stored with your #gtm account.

2.5 AI Inputs and Outputs

Certain features use artificial intelligence to generate or process replies and other content.

Information submitted for AI processing may include prompts, campaign instructions, relevant public X content, and other contextual information necessary to generate a response.

We currently use OpenRouter as an AI routing service.

OpenRouter may transmit requests to third-party AI model providers selected by us or through routing mechanisms. The specific AI model or model provider used by the Service may change over time.

Different model providers may have different data retention, processing, and model-training practices. Their processing is governed by their respective terms and privacy policies.

We recommend that users do not intentionally include unnecessary confidential, highly sensitive, or private personal information in prompts.

2.6 Payment Information

If you purchase a paid #gtm subscription, payments may be processed by a third-party payment processor or Merchant of Record identified during checkout.

We do not need to receive or store your complete payment card information.

We may receive limited billing-related information necessary to manage your subscription, such as:

payment status;
subscription status;
selected plan;
billing period;
transaction identifiers;
billing email or other limited transaction information.

Payment providers process payment information according to their own terms and privacy policies.

3. How We Use Information

We use information processed through #gtm to:

create and maintain your #gtm account;
connect your selected X account;
provide campaign and discovery functionality;
identify relevant public X content;
generate AI-assisted replies;
provide Manual Review functionality;
perform actions configured through Autopilot or other automation features;
maintain activity history;
enforce usage limits;
manage subscriptions;
operate, maintain, and improve the Service;
provide customer support;
identify and resolve technical problems;
prevent abuse, fraud, or security incidents;
comply with applicable legal requirements;
protect our users, Service, infrastructure, and legal rights.

We do not use X session authentication credentials for unrelated purposes.

We do not sell X session credentials.

4. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal data, we rely on one or more of the following:

Performance of a contract. Processing is necessary to provide the Service you request, including creating your account, connecting X, operating campaigns, generating replies, and providing subscription functionality.

Legitimate interests. We may process limited information where reasonably necessary to operate, secure, troubleshoot, prevent abuse of, and improve the Service.

Legal obligations. We may process or retain information where required by applicable law, regulation, court order, or another lawful request.

Consent. Where applicable law requires consent for specific processing, we may rely on your consent. You may withdraw consent where legally permitted.

5. Connecting Your X Account

Connecting an X account requires #gtm to process session authentication information associated with that account.

By connecting an X account, you authorize the Service to use that connection to provide the features you choose to use or enable.

You should connect only an X account that you own or that you are legally authorized to control.

The Service is not an official X integration unless explicitly stated otherwise for a specific feature.

Your use of X remains subject to X's own Terms of Service, rules, policies, technical restrictions, and enforcement decisions.

6. Manual Review and Automated Actions

The Service may offer different modes of interaction.

With Manual Review, you may review, edit, approve, or skip suggested replies or actions before they are performed.

With Autopilot or similar automation functionality, actions may be performed automatically according to the campaign settings and instructions you configure.

When enabling automated functionality, you instruct and authorize the Service to perform the configured actions without requiring separate approval for each individual action.

7. Disconnecting Your X Account

You may disconnect your connected X account from #gtm.

When you disconnect X, we delete the X session authentication credentials associated with that connection, including auth_token and ct0.

Disconnecting X does not automatically delete your #gtm account or other data associated with it.

For example, your email address, campaigns, prompts, replies, settings, and activity history may remain stored after X is disconnected.

If you wish to delete your entire #gtm account and associated information, you must request account deletion as described below.

8. Account Deletion

You may request complete deletion of your #gtm account by contacting:

gtm@belonix.xyz

We may ask you to verify that you control the account before processing a deletion request.

After a valid account deletion request, we will delete personal data and Service data associated with your account, including your email, stored X authentication credentials, campaigns, prompts, replies, settings, and activity history, except for information that we are legally required or reasonably permitted to retain.

Certain minimal records may be retained where necessary for legal compliance, accounting, fraud prevention, dispute resolution, or security purposes.

We may also provide additional account deletion functionality directly within the Service.

9. Third-Party Service Providers

We use third-party services where necessary to operate #gtm.

These may include:

OpenRouter and downstream AI model providers. Prompts and related contextual information may be transmitted for AI inference and generation.

Payment providers or Merchants of Record. These providers may process payments, subscriptions, refunds, billing information, and related transactions.

Infrastructure providers. Hosting, database, security, and other technical providers may process limited information necessary to operate the Service.

Third-party providers process information according to their own agreements, policies, and applicable law.

10. Sharing and Disclosure

We may disclose information:

to service providers necessary to operate #gtm;
where you instruct or authorize us to do so;
where required by applicable law or a valid legal request;
where reasonably necessary to investigate fraud, security incidents, or abuse;
where necessary to protect our users, rights, property, or infrastructure;
in connection with a merger, acquisition, financing, restructuring, or sale of the Service or its assets, subject to applicable law.

We do not sell X session authentication credentials.

11. International Data Processing

Some of our service providers, including AI and infrastructure providers, may process information in countries outside Moldova or outside the country where you reside.

Where applicable law requires safeguards for international transfers of personal data, we will take reasonable steps to use appropriate legal mechanisms.

12. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

X session credentials are retained while the X account remains connected and are deleted when X is disconnected or the #gtm account is deleted.

#gtm account information and user-created Service data may remain stored until the relevant information or account is deleted.

Certain technical, security, payment, or legal records may be retained where reasonably necessary or required by law.

Where information is no longer required, we will delete or anonymize it where reasonably practicable.

13. Security

X authentication credentials and other account information may be sensitive.

We take reasonable technical and organizational measures designed to protect information processed through #gtm from unauthorized access, disclosure, alteration, loss, or misuse.

However, no online system, database, authentication method, or transmission mechanism can be guaranteed to be completely secure.

If you believe your #gtm account or connected X account may have been compromised, you should immediately disconnect the X account where possible and contact us.

14. Your Privacy Rights

Depending on applicable law and where you reside, you may have rights concerning your personal information, including the right to:

request access to personal data we hold about you;
request correction of inaccurate information;
request deletion;
restrict certain processing;
object to certain processing;
request data portability where applicable;
withdraw consent where processing is based on consent;
lodge a complaint with an applicable data protection authority.

To submit a privacy request, contact gtm@belonix.xyz.

We may need to verify your identity before completing a request.

15. Children's Privacy

#gtm is intended for users who are at least 18 years old or otherwise legally capable of entering into a binding agreement in their jurisdiction.

We do not knowingly provide the Service to children.

16. Third-Party Platforms

#gtm interacts with third-party platforms, including X.

Those platforms operate independently from us and have their own terms, privacy practices, policies, technical rules, and enforcement systems.

We do not control and are not responsible for their independent privacy practices or decisions.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our Service, technology, providers, business practices, or legal obligations change.

If we make material changes, we will update the “Last Updated” date and provide additional notice where required by applicable law.

18. Contact

For privacy questions, account deletion requests, or other privacy-related matters, contact:

BELONOGOVA ALEXANDRA Tiraspol, Moldova Email: gtm@belonix.xyz Website: https://gtm.belonix.xyz/