Privacy Policy

Last updated: February 22, 2026

SherloX is a product developed and operated by Sherlabs.xyz ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you use the SherloX website, Chrome extension, and related services (collectively, the "Service").

1. Information We Collect

1.1 X (Twitter) Authentication

We use X (formerly Twitter) OAuth for authentication. When you sign in, we receive your X username, display name, and profile image. We do not receive or store your X password. We do not access your X direct messages, post on your behalf, or collect any private X data beyond what is publicly available on your profile.

1.2 Personal Information

We do not collect personal information beyond your X username and basic public profile data provided through X authentication. We do not collect your email address, phone number, physical address, or any other personally identifiable information directly.

1.3 Scan Data

When you scan an X account, the results (username history, bio history, top followers, crypto contracts, and deleted tweets) are stored to provide the Service. This data is derived from publicly available information and third-party APIs.

1.4 Usage Data

We collect basic usage statistics such as the number of scans performed and credits used. This data is associated with your account and used to provide usage analytics within the Service.

2. Payment Processing

2.1 Stripe

We use Stripe to process all payments. When you purchase credits, your payment information (credit card number, billing address, and related details) is collected and processed directly by Stripe. We do not receive, store, or have access to your full payment card details.

Stripe may collect the following information to process your payment and prevent fraud:

• Name and billing address
• Payment card details (processed securely by Stripe)
• Transaction amounts and history
• IP address and device information for fraud prevention
• Browser and device details through Stripe.js

Stripe processes this data in accordance with their own Privacy Policy. Stripe is PCI-DSS Level 1 certified, the highest level of payment security certification. We encourage you to review Stripe's privacy policy to understand how they handle your payment data.

2.2 What We Store

On our end, we only store your credit balance and transaction records (credits purchased, credits used, timestamps). We do not store any payment card information.

3. How We Use Your Information

• To provide and operate the Service
• To process credit purchases and manage your account balance
• To display scan results and usage statistics
• To improve and maintain the Service
• To prevent abuse and ensure fair use

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with:

• Stripe — for payment processing, as described above.
• X (Twitter) — authentication is handled through X's OAuth service.
• Third-party APIs — we use third-party data providers to retrieve publicly available account information for scans. We send only the target X username to these services.

We may disclose information if required by law, court order, or governmental authority.

5. Data Retention

Scan results are retained to provide the Service and may be displayed publicly on user profile pages. Account data (X username, credit balance) is retained as long as your account is active. You may request deletion of your account data by contacting us.

6. Cookies and Tracking

We use essential cookies for authentication (session tokens). We do not use third-party tracking cookies, advertising cookies, or analytics tracking services.

7. Security

We take reasonable measures to protect your data, including using HTTPS encryption for all communications and relying on Stripe's PCI-DSS compliant infrastructure for payment processing. However, no method of transmission over the internet is 100% secure.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or wish to request deletion of your data, please contact us at Sherlabs.xyz.