X (formerly Twitter)
X treats your content, data, and legal rights very aggressively: your posts and personal data can be used to train X's own AI and shared with third-party AI developers for free, your activity is tracked across the web even when you're logged out, and your data can be handed to governments without a court order or sold off in a business transaction. If X harms you, your ability to fight back is severely limited — you're barred from class actions, forced into arbitration that also shields Elon Musk's other companies, and X's total financial liability to you is capped at just $100. X can change its terms or privacy policy whenever it wants, delete your account without explanation, and keep your data essentially forever, including permanently after a suspension. In short, X claims broad rights over your content and information while offering you very little protection, recourse, or control in return.
Last analyzed
Heads up: this analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original document before you agree — see our Terms.
Clause-by-clause breakdown
Every clause we flagged in X (formerly Twitter)'s agreement, with what it means for you.
Your posts are used to train X's AI models for free.
“You agree that this license includes the right for us to (i) analyze text and other information you provide and to otherwise provide, promote, and improve the Services, including, for example, for use with and training of our machine learning and artificial intelligence models, whether generative or another type; and (ii) to make Content submitted to or through the Services available to other companies, organizations or individuals, including, for example, for improving the Services and the syndication, broadcast, distribution, repost, promotion or publication of such Content on other media and services, subject to our terms and conditions for such Content use. Such additional uses by us, or other companies, organizations or individuals, is made with no compensation paid to you with respect to the Content that you submit, post, transmit or otherwise make available through the Services as the use of the Services by you is hereby agreed as being sufficient compensation for the Content and grant of rights herein.”
Quoted verbatim from the agreement What this means: When you post anything on X — text, photos, videos — you automatically grant X a broad, royalty-free license to use that content to train AI models and share it with third-party companies and organizations, with no payment to you. X considers your access to the platform as sufficient compensation for this. You cannot opt out of this license while continuing to use the service.
What you can do: Avoid posting original creative work or sensitive personal content you would not want used in AI training. Deleting your account is the only way to stop future use, though content already used in training cannot be recalled.
You cannot sue X in a class action or get a jury trial.
“The parties agree that any arbitration shall be conducted on an individual basis only, and not as a class, collective, or representative action. The arbitrator shall have no authority to consolidate claims or to preside over any form of class, collective, or representative proceeding. Class Action and Jury Trial Waiver. WHERE PERMITTED BY APPLICABLE LAW, BY ENTERING INTO THESE TERMS, YOU AND X ARE EACH WAIVING THE RIGHT TO A TRIAL BY JURY OR TO BRING, JOIN, OR PARTICIPATE IN ANY PURPORTED CLASS ACTION, COLLECTIVE ACTION, PRIVATE ATTORNEY GENERAL ACTION, OR OTHER REPRESENTATIVE PROCEEDING OF ANY KIND AS A PLAINTIFF OR CLASS MEMBER. THE FOREGOING APPLIES TO ALL USERS (BOTH NATURAL PERSONS AND ENTITIES), REGARDLESS OF WHETHER YOU HAVE OBTAINED OR USED THE SERVICE FOR PERSONAL, COMMERCIAL, OR OTHER PURPOSES. TO THE EXTENT PERMITTED BY LAW, YOU ALSO WAIVE THE RIGHT TO PARTICIPATE AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS ACTION, COLLECTIVE ACTION, OR REPRESENTATIVE ACTION PROCEEDING AGAINST OUR CORPORATE AFFILIATES, INCLUDING BUT NOT LIMITED TO ANY SPACEXAI, CURSOR, OR SPACEX ENTITY.”
Quoted verbatim from the agreement What this means: You give up your right to sue X as part of a group (class action) and your right to a jury trial. If you have a dispute, you must pursue it alone through arbitration. This waiver also extends to X's corporate affiliates including SpaceXAI, Cursor, and SpaceX entities. This makes it economically impractical for most users to pursue small individual claims.
What you can do: EU and UK users are exempt from this clause. US users outside those regions have no practical opt-out under the current terms; consult a consumer rights attorney if you believe you have a significant claim against X.
X can change its rules anytime; continued use means you agree.
“We may revise these Terms from time to time. The most current version of the Terms, which will always be at https://x.com/tos, will govern our relationship with you. We will try to notify you of material revisions, for example via a service notification or an email to the email associated with your account. By continuing to access or use the Services after those revisions become effective, you agree to be bound by the revised Terms.”
Quoted verbatim from the agreement What this means: X can change its Terms at any time. Simply continuing to use X after a change takes effect means you have legally agreed to the new terms, even if you never read them. The notification is a best-effort promise ('will try'), not a guarantee.
What you can do: Watch for emails or in-app notifications from X about policy changes. If you disagree with a change, you must stop using the service and deactivate your account before the new terms take effect.
You have as little as one year to file any legal claim against X.
“You and X agree that you must initiate any proceeding or action asserting a federal claim within one (1) year of the date of the occurrence of the event or facts giving rise to a dispute that is arising out of or related to these Terms or the Services. You and X agree that you must initiate any proceeding or action asserting a state law claim within two (2) years and one day of the date of the occurrence of the event or facts giving rise to a dispute that is arising out of or related to these Terms or the Services. Otherwise, to the extent permitted by applicable law, you forever waive the right to pursue any claim or cause of action, of any kind or character, based on such events or facts, and such claims or causes of action are permanently barred.”
Quoted verbatim from the agreement What this means: X shortens the normal legal time window you have to file a claim. Federal claims must be filed within 1 year, and state law claims within just over 2 years — both shorter than many standard legal statutes of limitations. Miss these deadlines and you permanently lose your right to sue, even for serious harms.
What you can do: If you believe X has harmed you, consult a lawyer promptly — do not wait. The clock starts from when the harm occurred, not when you discovered it.
X's maximum payout to you for any harm is just $100.
“NOTWITHSTANDING ANY OTHER TERMS TO THE CONTRARY, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE X ENTITIES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, RELIANCE OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM (i) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICES; (ii) ANY CONDUCT OR CONTENT OF ANY USER OR THIRD PARTY ON THE SERVICES, INCLUDING WITHOUT LIMITATION, ANY DEFAMATORY, OFFENSIVE OR ILLEGAL CONDUCT OF OTHER USERS OR THIRD PARTIES; (iii) ANY CONTENT OBTAINED FROM THE SERVICES; OR (iv) UNAUTHORIZED ACCESS, USE OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT. IN NO EVENT SHALL THE AGGREGATE LIABILITY OF THE X ENTITIES EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS (U.S. $100.00) OR THE AMOUNT YOU PAID US, IF ANY, IN THE PAST SIX MONTHS FOR THE SERVICES GIVING RISE TO THE CLAIM.”
Quoted verbatim from the agreement What this means: No matter what harm X causes you — including data breaches, loss of your account, or exposure to harmful content — the most X will ever pay you is $100 (or what you paid them in the last 6 months, if more). This cap applies even if X was negligent. For most free users, this means X's maximum liability is $100.
What you can do: Be aware that you have very limited financial recourse against X for any harm. EU and UK users may have stronger statutory protections that override this cap.
X can share your data with governments without a court order.
“We also reserve the right to access, read, preserve, and disclose any information as we reasonably believe is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request; (ii) enforce the Terms, including investigation of potential violations hereof; (iii) detect, prevent, or otherwise address fraud, security or technical issues; (iv) respond to user support requests; or (v) protect the rights, property or safety of X, its users and the public.”
Quoted verbatim from the agreement What this means: X can hand over your data — including private messages — to governments or law enforcement whenever it 'reasonably believes' it is necessary, without specifying that a court order or warrant is required. The standard is X's own judgment, not a legal threshold. This is a broad disclosure right with no disclosed legal process requirement.
What you can do: Be aware that private messages and account data can be disclosed to authorities at X's discretion. Avoid sharing highly sensitive information via X's Direct Messages.
Your data can be shared with third parties to train their AI models.
“Third-party collaborators. Depending on your settings, or if you decide to share your data, we may share or disclose your information with third parties. If you do not opt out, in some instances the recipients of the information may use it for their own independent purposes in addition to those stated in X's Privacy Policy, including, for example, to train their artificial intelligence models, whether generative or otherwise.”
Quoted verbatim from the agreement What this means: X can share your personal data with third-party collaborators who may then use it for their own AI training and other purposes entirely unrelated to X's stated goals. This sharing happens by default — you must actively opt out to prevent it. The range of 'independent purposes' is undefined and potentially unlimited.
What you can do: Go to Settings → Privacy and Safety → Data sharing with business partners and turn off data sharing. Review all privacy settings regularly, as defaults may change.
X keeps all your posts and activity data for your entire account lifetime.
“We keep your profile information, such as your display name, user name, password and email address for the duration of your account. We cannot provide you with our products and services without retaining this information. We keep your usage information, such as the content you post, your interactions with other users' content and how you interact with others on the platform for the duration of your account or until such content is removed.”
Quoted verbatim from the agreement What this means: X retains your profile data and all usage data — including every post, like, reply, and interaction — for the entire lifetime of your account. There is no mechanism to selectively delete usage history while keeping your account active. This means years of behavioral data accumulate indefinitely.
What you can do: The only way to trigger deletion of this data is to fully deactivate your account. Consider periodically deleting posts and interactions manually, though X retains interaction metadata regardless.
Suspended users' email and phone number are kept forever.
“Where you violate our Rules and your account is suspended, we may keep the identifiers you used to create the account (such as your email address or phone number) indefinitely to prevent repeat policy offenders from creating new accounts.”
Quoted verbatim from the agreement What this means: If X suspends your account for a rules violation, it can permanently retain your email address and phone number with no time limit. This data is kept specifically to identify and block you, and you have no right to have it deleted. Even if the suspension was in error, this data may be held forever.
What you can do: If your account is wrongly suspended, use X's appeals process immediately. Be aware that once suspended, your identifying information may be permanently retained regardless of the outcome.
X can change its privacy policy; only X decides what counts as material.
“8. Changes To This Privacy Policy The most current version of this Privacy Policy governs our processing of your personal data and we may revise this Privacy Policy from time to time as needed. If we do revise this Privacy Policy and make changes that are determined by us to be material, we will provide you notice and an opportunity to review the revised Privacy Policy before you continue to use X.”
Quoted verbatim from the agreement What this means: X can change its Privacy Policy at any time. Only changes that X itself decides are 'material' trigger a notice to users. X alone decides what counts as material, meaning significant changes to how your data is used could take effect without meaningful warning. Continued use of the service after any change binds you to the new terms.
What you can do: Periodically check X's Privacy Policy page directly for updates. Consider setting a calendar reminder to review it every few months.
X tracks you across the web via ad partner integrations.
“We use your information to provide our advertising and sponsored content services subject to your settings, which helps make ads on X more relevant to you. We also use this information to measure the effectiveness of ads and to help recognize your devices to serve you ads on and off of X. Some of our ad partners also enable us to collect similar information directly from their website or app by integrating our advertising technology. Information shared by ad partners and affiliates or collected by X from the websites and apps of ad partners and affiliates may be combined with the other information you share with X and that X receives, generates, or infers about”
Quoted verbatim from the agreement What this means: X tracks you across the internet — not just on X itself — by partnering with advertisers who embed X's tracking technology on their websites and apps. Data collected off-platform is combined with your X profile to build a detailed picture of you for ad targeting. This happens even when you are not using X.
What you can do: Review your X privacy settings and disable personalized ads where possible. Using a browser with tracker-blocking extensions can reduce off-platform data collection.
X can collect your biometric data with your consent.
“Biometric information. Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes.”
Quoted verbatim from the agreement What this means: X reserves the right to collect biometric data (such as facial recognition or fingerprint data) from users who consent. While consent is required, the clause is vague about what specific biometric data is collected, how it is stored, and how long it is retained. Biometric data is among the most sensitive personal information.
What you can do: Do not consent to biometric data collection unless you fully understand what is being collected. Review any prompts asking for biometric consent carefully before agreeing.
X's license on your content covers all future technologies and uses.
“in any and all media or distribution methods now known or later developed, for any purpose. For clarity, these rights include, for example, curating, transforming, and translating. This license authorizes us to make your Content available to the rest of the world and to let others do the same.”
Quoted verbatim from the agreement What this means: The content license you grant X is not limited to current uses — it explicitly covers distribution methods not yet invented ('later developed') and applies 'for any purpose.' This means X can use your content in ways that don't exist today without needing to ask your permission again.
What you can do: Understand that anything you post on X is licensed for essentially unlimited future uses. Only post content you are comfortable with being used in any context, now or in the future.
X can delete your account for any reason or no reason.
“We may suspend or terminate your account or cease providing you with all or part of the Services at any time if we reasonably believe: (i) you have violated these Terms or our Rules and Policies; (ii) you create risk or possible legal exposure for us; (iii) your account should be removed due to unlawful conduct; (iv) your account should be removed due to prolonged inactivity; or (v) our provision of the Services to you is no longer commercially viable. We will make reasonable efforts to notify you by the email address associated with your account or the next time you attempt to access your account, depending on the circumstances. To the extent permitted by law, we may also terminate your account or cease providing you with all or part of the Services for any other reason or no reason at our convenience.”
Quoted verbatim from the agreement What this means: X can suspend or delete your account for almost any reason — including vague grounds like 'risk of legal exposure' or 'commercial inviability' — or even for no reason at all. Notification is a best-effort promise, not guaranteed. You could lose access to your account and all your content without meaningful warning.
What you can do: Regularly back up your posts and media using X's data export tool. Keep your contact email up to date so you receive any termination notices.
X collects your career history and shares it with employers.
“Job applications / recommendations. We may collect and use your personal information (such as your biographical information, employment history, educational history, employment preferences, skills and abilities, and job search activity and engagement, in addition to the information we already collect as disclosed in the "Information we collect when you use X" section of our Privacy Policy below) to recommend potential jobs to you, to share with potential employers when you apply for a job, to enable connections for professional opportunities, and to show you more relevant advertising.”
Quoted verbatim from the agreement What this means: If you use X's job features, X collects detailed professional and personal history — including your employment history, education, and job search activity — and can share this with potential employers and use it to target you with ads. This is a significant expansion of data collection beyond typical social media use.
What you can do: Only use X's job application features if you are comfortable with your professional data being shared with employers and used for ad targeting. Review what data you submit carefully.
X tracks and profiles you even when you're not logged in.
“Log information. We may receive information when you view content on or otherwise interact with our products and services, even if you have not created an account or are signed out, such as: IP address and related information; browser type and language; operating system; the referring webpage; access times; pages visited; location; your mobile carrier; device information (including device and application IDs); search terms and IDs (including those not submitted as queries); ads shown to you on X; X-generated identifiers; and identifiers associated with cookies.”
Quoted verbatim from the agreement What this means: X collects detailed tracking data — including your IP address, device identifiers, location, and even search terms you typed but didn't submit — even if you are logged out or don't have an account. This means X is building a profile on you even before you sign up.
What you can do: Use a VPN and privacy-focused browser to limit the data X can collect when you are not logged in. Blocking X's cookies via browser settings can also reduce tracking.
X's arbitration clause also protects SpaceX and other Musk companies.
“The choice of law, forum selection, and arbitration provisions of this section shall also extend to disputes involving our U.S. corporate affiliates, including but not limited to any U.S. SpaceXAI, Cursor, or SpaceX entities, who are intended third-party beneficiaries of this paragraph and who also consent to jurisdiction and venue in the courts specified in this section and to the arbitration provision in this section.”
Quoted verbatim from the agreement What this means: The arbitration and class action waiver clauses in X's terms don't just apply to X — they also protect Elon Musk's other companies including SpaceX, SpaceXAI, and Cursor. By agreeing to X's terms, you are also waiving your right to sue these unrelated companies in a class action.
What you can do: Be aware that your legal rights against multiple companies are affected by agreeing to X's terms. EU and UK users are not subject to this clause.
Accessing over 1 million posts in a day costs $15,000 in damages.
“you will be jointly and severally liable to us for liquidated damages as follows for requesting, viewing, or accessing more than 1,000,000 posts (including reply posts, video posts, image posts, and any other posts) in any 24-hour period - $15,000 USD per 1,000,000 posts.”
Quoted verbatim from the agreement What this means: If you access more than 1 million posts in a 24-hour period — which could happen through automated tools or even aggressive manual use — X can charge you $15,000 per million posts as liquidated damages. This clause is primarily aimed at scrapers but is written broadly enough to potentially affect power users or developers.
What you can do: Avoid using any automated tools to access X content at scale. If you are a developer, carefully review X's API terms before building any high-volume application.
X links your identity across devices and even when you're logged out.
“Inferred identity. We may collect or receive information that we use to infer your identity as detailed below: When you sign into X on a browser or device, we will associate that browser or device with your account. Subject to your settings, we may also associate your account with browsers or devices other than those you use to sign into X (or associate your signed-out device or browser with other browsers or devices or X-generated identifiers). When you provide other information to X, including an email address or phone number, we associate that information with your X account. Subject to your settings, we may also use this information in order to infer other information about you and/or your identity, for example by associating your account with hashes of email addresses that share common components with the email address you have provided to X. When you access X and are not signed in, we may infer your identity based on the information we collect.”
Quoted verbatim from the agreement What this means: X links your account to devices and browsers you didn't explicitly sign in on, and can infer your identity even when you're logged out. It also uses your email address to find and link other accounts or identities that share similar email patterns. This means X may be building a profile of you that spans multiple devices and even anonymous browsing sessions.
What you can do: Review your X privacy settings to limit cross-device association. Use a separate browser or private browsing mode when you don't want activity linked to your account.
Account deletion is delayed by at least 30 days after deactivation.
“For up to 30 days after deactivation it is still possible to restore your X account if it was accidentally or wrongfully deactivated.”
Quoted verbatim from the agreement What this means: When you deactivate your account, your data is queued for deletion but not immediately erased. There is a 30-day window during which the account can be restored, meaning deletion is not instant. The policy does not specify exactly how long after the 30-day window full deletion takes, leaving the timeline unclear.
What you can do: After deactivating your account, wait out the 30-day restoration window and then follow up with X to confirm your data has been deleted if you want certainty.
Your data can be sold or transferred if X is acquired or goes bankrupt.
“We may share, sell, or transfer information about you in connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy. This Privacy Policy will apply to your personal information that is shared with (before and after the close of any transaction) or transferred to the new entity.”
Quoted verbatim from the agreement What this means: If X is sold, merged, or goes bankrupt, your personal data can be transferred to the new owner as a business asset. While X says the current Privacy Policy will apply, the new owner could subsequently update that policy. You have no right to object to or opt out of this transfer.
What you can do: There is no opt-out for data transfer in a sale or merger. Monitor X's announcements for any ownership changes and review updated policies promptly if a transaction occurs.
X lets you download a copy of your personal data.
“You can download a copy of your information, such as your posts, by following the instructions here.”
Quoted verbatim from the agreement What this means: X provides a data export feature that lets you download a copy of your posts and other information. This is a meaningful user right that allows you to take your data with you. The export is available through account settings.
What you can do: Use Settings → Your Account → Download an archive of your data to export your X data at any time.
Frequently asked questions
Is X (formerly Twitter)'s Terms & Conditions agreement fair?
- BeforeYouClick grades X (formerly Twitter) E on an A–E scale, where A is the fairest. Its agreement contains 10 critical clauses, 11 warnings and 1 good practice.
What are the biggest problems with X (formerly Twitter)'s terms?
- The most serious clauses we flagged are: Posts Used to Train AI Without Pay, Forced Arbitration and Class Action Waiver and Terms Can Change Without Your Consent.
How long does it take to read X (formerly Twitter)'s terms?
- X (formerly Twitter)'s agreement takes about 120 minutes to read in full, across 22 clauses we reviewed. The summary on this page covers the same ground in under a minute.
When was X (formerly Twitter)'s agreement last analyzed?
- We last read X (formerly Twitter)'s Terms & Conditions on October 8, 2026. Companies change their terms without notice, so check the original document for the current version.
Is this analysis legal advice?
- No. This analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original agreement before you agree to it.
More agreements to read
- RedditSocialGrade D
- FacebookSocialGrade E
- TikTokSocialGrade E
- PinterestSocialGrade E
- PosteoProductivityGrade A
- Mullvad VPNSecurityGrade A