SwipvoxPrivacy Policy
This policy explains what personal data Swipvox collects, why, how we use and share it, and the rights you have. We aim to comply with applicable data-protection laws, including the EU/UK GDPR for users in those regions and US state privacy laws such as the CCPA/CPRA.
A plain-language policy drafted around our actual data practices. It is not legal advice.
1. Who we are & how to contact us
Swipvox (swipvox.com) is a developer product — a free open-source engine plus a paid build kit for shipping voice-driven swipe feeds — operated by SwipVox LLC, a company formed in Wyoming, United States. We are the controller of the personal data described here.
For any privacy question or to exercise your rights, email kl@swipvox.com.
2. What data we collect
- Account data — your email address (you sign in passwordless by email one-time code, or with Google). If you use Google sign-in, we also receive your name and Google account identifier from Google.
- Authentication state — a session token stored in a secure, HTTP-only cookie to keep you signed in to your buyer portal.
- Purchase data — if you buy the kit or a service, your Stripe customer and checkout identifiers, the plan, and the amount. We never see or store your full card number — card details are entered directly with Stripe, our payment processor.
- Delivery data — your GitHub username, if you choose to provide it, so we can grant you access to the private kit repository.
- Marketing preference — whether you opted in to product-update emails and our newsletter, and an unsubscribe token.
- Support communications — anything you send us by email or through an enquiry form.
We do not run third-party advertising or analytics trackers, and we do not use tracking pixels.
3. How we use your data & our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and secure your account; sign you in | Email, Google identifier, session token | Performance of a contract |
| Deliver what you bought (portal download + private repo access) | Email, GitHub username, purchase data | Performance of a contract |
| Take payment and issue receipts | Stripe identifiers, email | Performance of a contract |
| Send transactional email (sign-in codes, delivery, security/product updates about what you bought) | Performance of a contract | |
| Send our newsletter / marketing emails | Email, marketing preference | Consent (opt-in; withdrawable anytime) |
| Keep the service secure and prevent abuse, piracy, and licence breaches | Account data, request metadata, download/access logs | Legitimate interests |
| Comply with legal, tax, and accounting obligations | Purchase records | Legal obligation |
4. Who we share it with (sub-processors)
We share personal data only with the service providers that run Swipvox, each bound to process it on our instructions. We do not sell your personal data.
| Provider | Purpose | Role |
|---|---|---|
| Cloudflare | Website & app hosting (Pages), database (D1), file storage (R2) | Processor |
| Stripe | Payment processing & receipts | Independent controller of card data |
| Postmark | Transactional & newsletter email | Processor |
| "Continue with Google" sign-in | Processor (independent controller of your Google account) | |
| GitHub | Hosting the private kit repository we invite you to | Processor |
5. Cookies & local storage
Swipvox does not use advertising or analytics cookies. We set a single essential, HTTP-only session cookie so you stay signed in to your buyer portal, and we may store small interface flags in your browser. Signing out clears your session. Stripe, Google, and GitHub may set their own cookies when you interact with their hosted checkout, sign-in, or repository screens, governed by their own privacy policies.
6. How long we keep it
We keep account and purchase data for as long as you have access to what you bought (a licence is typically perpetual) and as needed to provide updates and support. Where you close your account or ask us to, we delete or anonymise your account data within a reasonable period, except records we must retain for legal, tax, or accounting reasons (for example, invoices, typically up to the period required by law). We retain licence and download/access logs as needed to enforce our terms and investigate piracy.
7. Your rights
Subject to applicable law, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on it (for example, unsubscribing from marketing at any time via the link in every such email). To exercise any of these, email kl@swipvox.com. EU/UK users may also lodge a complaint with their local supervisory authority; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.
8. International transfers
We are based in the United States, and some of our providers process data in the US and elsewhere. Where we transfer data out of the EU/EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, so your data keeps a comparable level of protection.
9. Security
We protect your data with encryption in transit (HTTPS), access controls, passwordless authentication, and reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we work to protect your information and to address issues promptly.
10. Children
Swipvox is a tool for developers and is not directed to children; it is intended for users aged 16 or older. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the service evolves. We will change the effective date above and, for material changes, take reasonable steps to notify you. Questions? kl@swipvox.com.