Your data in Penny

Penny is currently in private beta. Customer subscriptions are disabled until payment setup and launch details are confirmed.

What your workspace stores

Penny stores your connected X profile, business facts and reply examples, campaign settings, contact IDs and available public profile names, consent and opt-out records, limited message text, link activity, and delivery results. These records power your own workspace.

Your account email

Penny requires an email through its sign-in provider and stores that address for account notices. Trial usage warnings and billing reminders use this address. When email delivery is enabled, the address and notice contents are processed by Resend. These service notices do not subscribe you to marketing emails. You can see the address in Settings; changing it is managed through your sign-in provider.

Connections and credentials

X access and refresh tokens are encrypted before database storage. Optional Whop API keys and signing secrets are encrypted with a separate workspace-bound context. Credentials stay on the server. Connecting messaging gives Penny the permissions shown on X’s authorization screen. You can disconnect from Penny or revoke access in X’s connected-app settings.

Optional background Chat access

The private device test keeps your X Chat keys on your device. If you separately authorize background messaging, your browser sends an encrypted copy of your existing Chat keys to Penny. Penny stores that copy encrypted and can decrypt conversations on its servers while you are offline. Your X Chat PIN is never sent to Penny or stored. Disconnecting background messaging removes its stored keys and stops automation. Penny never replaces your registered X identity keys.

Links and messages

Tracked links use a random reference rather than exposing an X user ID in the URL. Penny records a unique click per contact and does not store the visitor’s IP address or browser agent in its click records. Saved-message campaigns use your templates. When a workspace owner activates AI replies, Penny processes incoming DMs and matching keyword comments through OpenAI to generate replies from the saved business information. AI replies do not confirm purchases, bookings, or community access.

Payments

When subscriptions are enabled, Stripe hosts payment collection and subscription management. Penny does not collect or store card numbers. Purchase attribution for your own customers is optional and requires a supported checkout reference. Whop checkouts carry a random reference so signed purchase or membership events can stop the related reminder. Discount offers are controlled by the business and limited to one use and a 15-minute redemption window.

Message retention

Background maintenance clears saved inbound, outbound, and AI conversation text after 30 days. Minimal delivery, consent, opt-out and click records remain until workspace deletion. Maintenance must be connected for scheduled cleanup to run.

Your controls

Workspace settings provide data export and deletion. Deletion requires confirmation and an ended subscription. A minimal trial-eligibility record, including a one-way hash of the X account ID, trial dates, and usage totals, is retained to prevent repeated free trials; it contains no message text or card details. Disconnecting X stops campaign automation. Replying STOP to a campaign message stops further automated messages from that workspace.