What they may do · DPDP §6(4)
What X (Twitter) does with your data
X's policy discloses all six uses in its own words: ad targeting, recognising your devices to serve ads on and off X, training its AI models on what it collects, biometric data with consent, sharing with third parties who may train their own AI, and keeping suspended-account identifiers indefinitely.
Who to write to at X (Twitter)
X (Twitter) publishes a form and no address. Email is not actioned there, so the form below is the route that reaches a person.
- Who holds it
- Resident Grievance Officer, Vinay Prakash — X states in writing that this officer cannot be contacted by email
Show me where they publish that
X (Twitter) publishes“Resident Grievance Officer Vinay Prakash. The Resident Grievance Officer cannot be contacted by email, and X Corp. does not accept service of any legal process by email. To contact the Resident Grievance Officer ... use the Report to Grievance Officer Form. X Corp. can also be contacted in India at the following address: 8th Floor, The Estate, 121 Dickenson Road, Bangalore 560 042”
Read on 2026-09-21 their page↗
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
X (Twitter)’s own policy says “Depending on your settings, or if you decide to share your data, we may share or disclose your information with third parties. If you do not opt out, in some instances the recipients of the information may use it for their own independent purposes in addition to those stated in X’s Privacy Policy, including, for example, to train their artificial intelligence models, whether generative or otherwise.”
Our summary may share your information with third parties who, unless you opt out, may use it for their own purposes including training their own AI models.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
X (Twitter)’s own policy says “We use your information to provide our advertising and sponsored content services subject to your settings, which helps make ads on X more relevant to you.”
Our summary uses your information for advertising and sponsored content, to make ads on X more relevant to you.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
X (Twitter)’s own policy says “We also use this information to measure the effectiveness of ads and to help recognize your devices to serve you ads on and off of X. Some of our ad partners also enable us to collect similar information directly from their website or app by integrating our advertising technology.”
Our summary recognises your devices to serve ads off X, and collects information directly from ad partners' own websites and apps.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
X (Twitter)’s own policy says “Where you violate our Rules and your account is suspended, we may keep the identifiers you used to create the account (such as your email address or phone number) indefinitely to prevent repeat policy offenders from creating new accounts.”
Our summary keeps the identifiers behind a suspended account indefinitely, to stop repeat offenders re-registering.
-
Processes your face or other biometrics
Face matching, liveness checks or similar.
What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.
Show me where they say that
X (Twitter)’s own policy says “Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes.”
Our summary may collect and use your biometric information, based on your consent, for safety, security and identification.
-
Trains AI models on your content
Your photos, messages or activity are used to train machine-learning models.
What this costs you. This one has no undo. Once your content is inside a trained model, no erasure request can lift it back out.
Show me where they say that
X (Twitter)’s own policy says “We may use the information we collect and publicly available information to help train our machine learning or artificial intelligence models for the purposes outlined in this policy.”
Our summary may use the information it collects to help train its machine learning or artificial intelligence models.
X is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · built in India for the DPDP Act
Questions
What does X (Twitter) do with my personal data?
According to X (Twitter)'s own privacy policy, read on 2026-08-13, it discloses 6 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, processes your face or other biometrics, trains ai models on your content.
Can I withdraw my consent from X (Twitter)?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does X (Twitter) track me for advertising?
Yes — X (Twitter)'s published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one X (Twitter) declared in its own published privacy policy, which we
read on 2026-08-13. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy