Privacy Policy
We collect what we need to build and run your marketing system. We do not sell it. You can disconnect any account and ask us to delete your data at any time.
Who we are and what this covers
SWEY Holdings, LLC ("SWEY", "we", "us") is a marketing company based in Utah, United States. This policy covers our website at swey.biz, our booking and chat tools, and SWEY OS at app.swey.biz, including any SWEY features embedded inside a system we built for a client (together, the "Services").
When we build or run a system for a business, that business decides what data goes into it. For that data we act on the business's instructions as its service provider, under our agreement with it. If you are a customer of one of our clients, contact that business first; we will help them answer you.
What we collect
Information you give us
- Booking and contact forms: name, email, phone, company, website, role, and your answers about your business, budget and goals.
- Site chat: the messages you send and a random visitor ID stored in your browser so the conversation continues.
- Accounts: name, email, password (stored only as a hash by our authentication provider), organization and team members.
- Content you add: brand documents, notes, briefs, corrections, uploaded files and the decisions your team records.
- Billing: plan and payment status. Card details are handled by Stripe; we never see or store full card numbers.
Information collected automatically
- Device and log data: IP address, browser type, pages visited, referring page, and timestamps.
- Cookies and local storage needed to keep you signed in, remember your chat, and measure site traffic. We do not use them to sell advertising.
Connected platforms
SWEY OS works only with accounts you connect, using that platform's official sign-in. You choose what to connect and can disconnect at any time. Depending on what you connect, we access:
| Platform | What we access | Why |
|---|---|---|
| Meta (Facebook and Instagram) | Pages and Instagram business accounts you manage, posts, comments, direct messages, insights, ad accounts, campaigns and ad performance | Publish content, route messages and comments to your inbox, report results, manage ads you approve |
| Google Ads | Accounts, campaigns, keywords, budgets and performance | Report results and make changes you approve |
| Google Analytics and Search Console | Traffic, conversion and search performance reports (read only) | Measure what your marketing did |
| YouTube | Channel and video analytics (read only) | Measure creator and channel performance |
| Shopify | Store, products, orders and customers | Revenue reporting, customer segments and campaign results |
| Klaviyo | Lists, profiles, campaigns, flows and metrics | Build and measure email and SMS |
| Canva and publishing tools | Designs and posts you choose to send | Create and schedule content |
Access tokens for connected platforms are encrypted and used only to provide the feature you turned on.
How we use it
- Provide, run and support the Services, including the Brand Agent's memory for your organization.
- Reply to inquiries, schedule calls and send service messages.
- Show your team reports and recommendations based on your own data.
- Keep the Services secure, prevent abuse, and meet legal obligations.
- Improve the Services using aggregated or de-identified usage information.
We do not sell personal information. We do not use data from your connected platforms to target ads at anyone, to build profiles for other customers, or to train general-purpose AI models. Your organization's memory is used for your organization.
Google user data
SWEY's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google user data only to provide the features you can see and turned on. We do not transfer it to others except as needed to provide those features, for security, to comply with law, or as part of a merger or acquisition with notice to you. We do not use it for advertising, and people at SWEY read it only with your permission, for security, or where the law requires. You can revoke access at any time in your Google Account permissions.
Meta user data
We use data from Meta platforms only to provide the features you connected, in line with the Meta Platform Terms and Developer Policies. You can remove SWEY at any time in Facebook under Settings and privacy, Settings, Business integrations, or in Instagram under Settings, Apps and websites. To have your data deleted, follow the steps on our data deletion page.
Who we share it with
We share information only with the providers that run the Services for us, under contracts that limit their use of it:
- Supabase: database, authentication and file storage.
- Railway: application hosting.
- Resend: transactional email.
- Stripe: payments and billing.
- AI model providers (such as Google Gemini): to generate drafts, answers and analysis you request. We use provider terms and settings under which this data is not used to train their models.
- The platforms you connect: to carry out actions you approve, such as publishing a post or changing a campaign.
We also disclose information when the law requires it, to protect the rights and safety of our users and others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.
How long we keep it
- Account and organization data: while your account is active, then deleted within 30 days of closing it.
- Connected platform data: while the connection is active. When you disconnect, we delete stored tokens immediately and the platform's data within 30 days.
- Inquiries and bookings: up to 24 months after our last contact, unless you become a client.
- Billing and legal records: as long as tax and accounting law requires.
Deleted data leaves our rolling backups within 90 days.
Your choices and rights
You can ask to access, correct, export or delete your personal information, or to object to how we use it. Email hello@swey.biz. We answer within 30 days and will not treat you differently for asking. Depending on where you live, including California and the European Economic Area, you may have additional rights, including the right to complain to your local data protection authority. You can unsubscribe from marketing email with the link in any message.
Security
Data is encrypted in transit and at rest. Access tokens are encrypted, access inside SWEY is limited to the people who need it, and each organization's data is separated from every other organization's. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.
Children
The Services are for businesses and are not directed to children under 16. We do not knowingly collect their information. If you believe a child has given us information, email hello@swey.biz and we will delete it.
Changes and contact
If we change this policy we will update the date above, and for material changes we will notify account holders by email or in the product before the change takes effect.
SWEY Holdings, LLC, Utah, United States ยท hello@swey.biz