X (Twitter) Terms of Service & Privacy Policy
Poor
Aggressive data harvesting for AI training with minimal transparency and a deteriorating privacy posture.
Source: https://x.com/en/tos
Posts & Interactions
Every post, reply, like, bookmark, DM, space conversation, and list interaction is collected and stored.
Contact & Address Book
If you sync contacts, X stores your entire phone address book including people who don't have X accounts.
Device & Location Data
IP address, device identifiers, precise GPS (if enabled), inferred location from IP and activity patterns.
Browsing Activity
Websites you visit that have X buttons or embeds report your activity back. X also tracks links you click within the platform.
Biometric Data
Government ID uploads for verification, plus potential biometric data from photos and videos for identity matching.
Grok AI Training
Public posts are used to train xAI's Grok language model. Users were opted in by default with the toggle buried in settings.
Targeted Advertising
Behavioral data powers ad targeting across X and partner ad networks.
Data Licensing
X sells access to public post data to researchers, businesses, and AI companies through its API at premium prices.
Third-Party Sharing
Data shared with business partners, advertisers, and affiliated companies including those in the xAI ecosystem.
Broad Content License
HIGH RISK“You grant us a worldwide, non-exclusive, royalty-free license to use, copy, reproduce, process, adapt, modify, publish, transmit, display, upload, and distribute your Content in any and all media or distribution methods now known or later developed.”
This means: X can do anything with your posts, including licensing them to AI companies. 'Methods now known or later developed' is an open-ended blank check.
AI Training Consent
HIGH RISK“You agree that this license includes the right for us to make your Content available to other companies, organizations, or individuals for the syndication, broadcast, distribution, or publication of such Content.”
This means: Your tweets feed Grok and potentially any company X partners with. You were opted into this without being asked.
Dispute Resolution via Arbitration
HIGH RISK“You agree that disputes between you and us will be resolved by binding, individual arbitration.”
This means: No class actions, no jury trials. If X mishandles your data at scale, each affected person must fight alone.
Delete your account
Yes — account deactivation starts immediately but full deletion takes 30 days. Reactivation possible within that window.
Data retention
Some data retained beyond deletion for legal compliance, safety, and 'legitimate business purposes' — vaguely defined.
Data portability
Download Your Data feature available in Settings. Limited compared to Google Takeout.
Grok AI training opt-in by default
X silently enabled sharing your posts with Grok for AI training. Most users never knew the setting existed, and it was only accessible on web — not mobile — when first rolled out.
Industry context: Meta and Google have similar AI training policies but were more transparent about the rollout. X's stealth approach drew regulatory scrutiny in the EU.
Selling public data access at premium API prices
X monetizes your content by selling API access to companies and AI trainers. Researchers who previously had free access now pay thousands per month.
Industry context: Reddit made a similar controversial move. Most social platforms allow some API access but X's pricing and approach have been the most aggressive.
Contact syncing collects non-user data
When you share your contacts, X builds profiles on people who never agreed to use the platform. This 'shadow profiling' raises serious consent issues.
Industry context: Facebook faced major backlash for identical practices. X continues the practice with less scrutiny.
Deteriorating privacy governance
Since the ownership change, X has reduced its trust & safety team, left the EU Code of Practice on Disinformation, and faced multiple regulatory actions.
Industry context: X is the only major platform to voluntarily withdraw from industry self-regulation frameworks.
X's privacy posture has significantly worsened. Your posts train Grok AI by default, your data is sold via premium API access, and privacy governance has been dismantled. The broad content license combined with AI training makes every post potential training data. If you use X, immediately check Settings > Privacy > Grok and disable data sharing, and be aware that anything you post publicly is being monetized.
Want to analyze a different service? Analyze any TOS →