Privacy Policy

Last updated: October 13, 2026

What we collect

When you create an account we store your email, your name (optional) and a securely hashed password, or your Google account email if you sign in with Google. When you buy a key we store the plan, amount, Binance Order ID and the X username you enter for the key.

Why

We use this only to deliver your Access Key, show your keys and receipts in your dashboard, check that a key is used with the X username it was bought for, and help you if you contact support.

The extension

The extension sends only your Access Key and X username to our server to check the key. When you select My API, your own key is stored in extension-local storage and requests go to the provider you select. When you select Fix Credits, post text, reply context, keywords and your reply-style prompt are sent to our Cloudflare Worker and the AI service to generate a reply. Our service key never goes to your browser. Reply text is cached for retries for up to 24 hours and is then removed during scheduled cleanup. Account and credit transaction records are kept for billing and support.

Security

Passwords are hashed (PBKDF2) and never stored in plain text. Payments are checked directly with Binance; we never see your Binance login. Payment verification uses Cloudflare Turnstile. Wallet payouts are disabled during setup, and a reward is never shown as paid merely because an owner clicked Confirm.

Credits and referrals

We store balances, purchase quantities, reply request IDs and billing events. Signed-in customers can look up a verified purchased X username to see the available credit balance of its newest active purchased key and send a topup. This lookup does not reveal the Access Key, account email, credit usage history or purchase history. For referrals we store your BEP20 address, referral code, reward status and hashed signup IP for abuse review. The address is not included in your referral URL. Locally saved Link Engage memory contains status IDs and timestamps, is separated by X account and expires after 24 hours. Queue Reset does not delete memory; use Reset memory to delete it immediately.

Sharing

We do not sell your data. We use Cloudflare (hosting), Google (optional sign-in) Binance (payment checks), OpenAI (Fix Credits reply generation), and Telegram (purchase notifications and owner reward review) to run the service. Selected provider API services receive the text submitted for generation. We do not use the data for advertising. Account email and purchase metadata may appear in private owner notifications; API keys and wallet private keys do not.

Deleting your data

Message us on Telegram to delete your account: @Fixasif