Privacy Policy

1. Who is responsible

AKY X GROUP LTD (company number 14137444, 128 City Road, London, England, EC1V 2NX) is the controller of the personal data described here, under the UK GDPR and the Data Protection Act 2018. Questions or requests: hi@jevcheck.app.

2. What we collect and why

When you paste a post

The text you paste, or the post we fetch from a link you paste (its text, public metrics and the author's handle), and the score we produce. This becomes a public verdict card and page. Lawful basis: legitimate interests in providing the checking service you asked for.

Rate limiting

Your IP address combined with a random identifier in a cookie (vid), used only to enforce the 10 free checks per day. The counter expires after about 26 hours. Lawful basis: legitimate interests in preventing abuse and controlling costs.

When you sign in with X

• Your X user ID, handle, display name, profile image and, if you allow it, the email address on your X account.
• The access and refresh tokens X gives us. We store them encrypted and use them only to read your own recent posts. We request read access only.
• Your recent public posts (up to 200), their metrics, and the scores and reports we build from them.

Lawful basis: contract (providing the teaser and any report you buy), and legitimate interests for a single reminder email if you leave a free teaser unpaid. We send it once; reply “stop” and we delete your email address.

When you buy

Purchases are sold by Polar Software, Inc. as reseller and merchant of record. Polar collects your payment and billing details under its own privacy policy. From Polar we receive your email address, the product, amount, and Polar's order and customer IDs, and whether a refund was issued. We never see or store card details. Lawful basis: contract, and legal obligation for accounting records.

People whose posts are checked

If someone checks your public post, summons the bot under it, or buys a report on your public account, we process your handle, public posts and metrics, and the resulting scores. We never check protected accounts. Lawful basis: legitimate interests in offering commentary on public writing style. You can object at any time (see section 6), and we'll stop.

The @jevcheck bot

When you mention @jevcheck, we record the mention ID, your X user ID (to apply the 20-per-day limit), the parent post, and our reply.

Technical logs

Request logs and error reports kept by our hosting providers for security and debugging, usually for no more than 30 days.

3. Automated scoring

Scores are produced automatically, with no human review. They are opinions about writing style and have no legal or similarly significant effect on anyone, so they are not decisions covered by Article 22 UK GDPR. If you think a score about your post is unfair, tell us and we'll look at it.

4. Who we share data with

We don't sell personal data and we don't use advertising trackers. We use these providers to run the Service, under contracts that limit them to processing on our instructions:

Verdict cards and pages are public to anyone with the link, and may be shared on X by whoever posts them. We may also disclose data where the law requires it.

5. International transfers

Some providers process data in the USA. Where they do, we rely on the UK Extension to the EU–US Data Privacy Framework, or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. Your rights

You can ask to access, correct, delete or export your data, to restrict how we use it, or to object to processing based on legitimate interests, including objecting to your account being checked. Email hi@jevcheck.app. We may need to confirm you control the X account concerned, and we'll reply within one month.

You can revoke Jev-check's access at any time in X under Settings → Security and account access → Apps and sessions. You can also complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to fix things first.

7. How long we keep data

• Rate-limit counters: about 26 hours. Cached verdicts: 30 days.
• Account and encrypted X tokens: until you ask us to delete your account.
• Checks, cards and reports: until you or the post's author asks us to remove them.
• Purchase records: 6 years, as required for UK tax and accounting.
• Bot mention records: 12 months.

8. Cookies

We only use cookies that the Service needs to work, so we don't show a cookie banner:

• Sign-in session (authjs.*): keeps you signed in and protects the sign-in flow.
• Visitor ID (vid): enforces the free daily check limit. It lasts up to a year.

Polar and its payment processor set their own cookies on the checkout pages for payment security and fraud prevention.

9. Security

We encrypt X tokens at rest, use HTTPS everywhere, and limit access to production data. No system is perfectly secure. If a breach affects you, we'll tell you and the ICO where the law requires.

10. Children

The Service is not directed at children under 13, and you must be 18 or older to buy. If you think a child has given us data, contact us and we'll delete it.

11. Changes

If we change this policy materially, we'll update the date at the top and, where appropriate, tell you by email. See also our Terms.