Privacy Policy — Swyftreach

1. Introduction

Swyftreach ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share information when you use our platform and services. By using Swyftreach, you consent to the practices described in this policy.

2. Information We Collect

Account Information: Name, email address, and password when you register. If you sign in with Google, we receive your name and email from Google.

Usage Data: Pages visited, features used, campaign performance metrics, and actions taken within the platform.

Contact Data: Email addresses and other fields you import into the platform for your campaigns. This data belongs to you; we process it only to deliver the service.

Payment Information: Billing details are processed by PayPal. We store only a subscription record; we do not store full card numbers.

Technical Data: IP address, browser type, device identifiers, and log data collected automatically when you use the service.

AI Keys (BYOK): If you provide a third-party AI API key, it is encrypted at rest using AES-256-GCM and never logged or shared.

3. How We Use Your Information

To provide, operate, and improve the Platform
To authenticate you and secure your account
To process payments and manage subscriptions
To send transactional emails (receipts, password resets, account alerts)
To send service announcements and product updates (you can opt out)
To analyze usage patterns and improve product features
To comply with legal obligations and enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your contact lists for our own marketing.

4. Data Sharing

We share your information only in limited circumstances:

Service Providers: Infrastructure providers (PostgreSQL hosting), transactional email (ZeptoMail), and payment processors (PayPal) — under strict data processing agreements
AI Providers: If you use BYOK AI, your prompts are sent to the provider you configured (OpenAI, Anthropic, or xAI). Our platform AI (Grok) processes only chat messages
Legal Compliance: When required by law, court order, or to protect the rights and safety of users

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Campaign performance data may be retained in anonymized, aggregated form for analytics purposes.

6. Security

We implement industry-standard security measures including AES-256-GCM encryption for sensitive credentials, TLS in transit, and access controls. However, no system is 100% secure. Please use a strong, unique password and enable two-factor authentication where available.

7. Your Rights

Depending on your location, you may have rights to:

Access, correct, or delete your personal data
Withdraw consent for data processing
Data portability (export your data)
Object to processing or request restriction
Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@swyftreach.com.

8. Cookies

We use session cookies for authentication and local storage for theme preferences. We do not use third-party advertising cookies or tracking pixels on our marketing pages.

9. Children's Privacy

The Platform is not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. International Transfers

Your data may be processed in countries other than your own. We rely on standard contractual clauses and other lawful transfer mechanisms to ensure your data receives adequate protection regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or in-app announcement. The "Last updated" date at the top of this page indicates when the most recent version was published.

12. Contact Us

For privacy-related questions or requests, contact our Data Protection team at privacy@swyftreach.com or via our contact form.