X Xairo
Account Download

Privacy Policy

Last updated September 14, 2026

Xairo is a desktop publishing application operated by JahkRCode ("Xairo", "we", "us"). This policy covers the desktop application and the services at xairoapp.com and api.xairoapp.com. It is written plainly because you should be able to read it.

The short version

  • We hold your email address, your plan, your devices, which accounts you connected, and how many posts you published.
  • We never receive the text of your posts, your images or your videos. They go from your computer straight to the network.
  • We never store the access tokens for your social accounts. They live in your operating system's keychain.
  • We do not sell personal information and we run no advertising or third-party analytics on this site.

What we collect

Account information

The desktop app creates an account for itself the first time it opens, so that your trial, your plan and your credits have somewhere to live. That account holds the date it was created and no email address. If you sign in on this site we also hold the email address you give and the sign-in codes we email you (stored only as a salted hash, for fifteen minutes). We have no password to store.

Devices

For each copy of the desktop app: a name you can see, the operating system family, the app version, and a salted hash of a random identifier the app keeps in your operating system keychain, which is how a copy of the app is recognised as the same one the next time it opens. It is not derived from your hardware and identifies nothing outside Xairo. This lets you remove a lost machine.

Connections

For each social account you connect: the network, the account's identifier on that network, its handle and display name, and when you connected it. We keep this so the portal can list your accounts and so we can honour a deletion request from the network's side. We do not keep the credentials.

Usage

A record per publish: the network, how many credits it cost, whether it succeeded, and optionally the identifier the network gave the post so you can find it again. We do not record what the post said.

Billing

Polar is our merchant of record and processes payments. We store a Polar customer identifier, your plan, its status and the period dates. We never see or store card numbers.

Media handed to networks that download it

Instagram, Threads and TikTok photo posts do not accept a file upload: the network downloads the image or video from a web address. For those networks only, the desktop app uploads the file you chose to our storage at Cloudflare R2 under a random name, gives the network a link to it, and deletes it as soon as publishing finishes. Anything left behind by a crash is deleted automatically within one day. We never look at, index, copy or keep these files, and no other network's media passes through us.

Server logs

One line per request with a request identifier, the method, the path, the status, how long it took, and the account identifier where the request was authenticated. Tokens, sign-in codes and request bodies are never written to logs. Logs are retained for 30 days.

What we never collect

  • The content of your posts, in any form, at any time.
  • Your images, videos or any other media, beyond the brief hand-off described above for networks that download media from a link.
  • Access tokens or refresh tokens for your social accounts. Our token broker passes them through in a single response and keeps no copy.
  • Your social account passwords. You type those on the network's own site, never in Xairo.
  • Browsing behaviour. This site has no analytics, no pixels, no advertising cookies.

How the token broker works

Social networks require an approved application to hold a client secret. Xairo holds one application per network so you do not have to register your own. When you press Connect, the desktop app asks our service to start the sign-in, you approve on the network's own site, and the network returns a short-lived authorisation code. The desktop app sends that code to our service, which exchanges it for tokens using the client secret and returns them in the response. Those tokens are written to your operating system's keychain by the desktop app. Our service writes them nowhere: not to the database, not to a cache, not to a log.

Cookies

One cookie, named xairo_session, set only when you sign in on this site or open your account from the desktop app. It is httpOnly, Secure and SameSite=Lax, holds an opaque session identifier, and lasts 30 days. It exists so the account page knows who you are. There are no other cookies.

Who else processes your data

  • Railway — hosting and the managed PostgreSQL database, in the United States.
  • Cloudflare — R2 storage for the short-lived media hand-off to Instagram, Threads and TikTok photos.
  • Polar — merchant of record: payment processing, invoices, sales tax and the billing portal.
  • Resend — delivery of sign-in code emails.
  • The social networks you connect — when you publish, the post goes to them directly under their own terms and privacy policies.

We add no analytics, error-tracking or session-recording services. If that changes this page changes first.

Platform-specific terms

Xairo uses the YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's use of data is governed by the Google Privacy Policy. You can revoke Xairo's access to your Google account at any time at Google's security settings page. Data retrieved from the YouTube API is stored only on your own machine and is refreshed or deleted within 30 days.

Connections to Facebook, Instagram and Threads are governed by Meta's platform terms; to X by the X Developer Agreement; to TikTok by the TikTok Developer Terms; to LinkedIn by the LinkedIn API Terms of Use; to Reddit by the Reddit Data API Terms; and to Twitch by the Twitch Developer Services Agreement. Removing Xairo from any of those networks immediately stops it from publishing there.

How long we keep things

  • Sign-in codes: 15 minutes, then unusable.
  • Sessions: 30 days for this site, 90 days for a desktop device, or until you sign out.
  • Account, connection and usage records: until you delete your account.
  • Server logs: 30 days.
  • Billing records: as long as tax and accounting law requires, typically seven years, held by Polar.

Deleting your data

Open your account and press Delete account. Everything listed above is removed from our database in the same request, and you get a confirmation code you can check on our data deletion page. If you connected a Meta account, you can also start the deletion from Facebook or Instagram's own app settings and Meta will call us; we handle that automatically and return the same confirmation code.

Deleting your Xairo account does not delete posts you already published. Those belong to the networks. It also does not remove the tokens on your own machine: sign out of the desktop app to clear those from your keychain.

Your rights

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to privacy@xairoapp.com and we will answer within 30 days. If you are in the European Economic Area or the United Kingdom, our legal basis for processing is performance of our contract with you for everything except security logging, which is our legitimate interest in keeping the service working. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right.

Children

Xairo is not for anyone under 16 and we do not knowingly collect information from children. If you believe a child has an account, write to us and we will remove it.

Changes

If this policy changes materially we will email every account before the change takes effect. The date at the top always reflects the current version.

Contact

JahkRCode, operator of Xairo. Privacy questions: privacy@xairoapp.com. Everything else: support@xairoapp.com.