Privacy Policy

At Swashi, your privacy is a top priority. This Privacy Policy explains how we collect, use, store, protect, and disclose your information when you use our platform, products, APIs, and services (collectively, the “Services”).

By accessing or using Swashi, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect only the information necessary to operate, improve, and secure the Swashi platform.

• Account Information: Name, email address, authentication provider details, and account preferences.
• Usage Data: Feature usage, interaction logs, timestamps, IP address (anonymized where possible), and device/browser metadata.
• Content & Inputs: Product URLs, text prompts, images, metadata, and other content you submit for analysis, scraping, or generation.
• Customer lists you upload: if you upload a customer list for your AI receptionist, we store the names, phone numbers, email addresses, preferred languages, VIP marks and notes you provide, and use them only to recognise returning callers on your own phone line. We never use them for calls, texts or emails you did not request, and you can delete the whole list at any time in AI Receptionist → Receptionist setup → Your customers.
• Payment Information: Billing details are processed securely by third-party payment providers. Swashi does not store raw card data.

2. How We Use Your Data

Your information is used strictly for the following purposes:

• Powering the Swashi Neural Agents and AI workflows
• Generating content, insights, and automations you request
• Improving performance, reliability, and accuracy
• Maintaining platform security and preventing abuse
• Customer support and account communications
• Legal compliance and enforcement of our Terms

We do not sell your personal data and never use it for third-party advertising.

3. AI Processing & Third-Party APIs

Swashi integrates with trusted third-party services, including AI model providers, data-processing services, and cloud infrastructure providers.

Data sent to these services is used solely to fulfill your requests and is handled under their respective privacy and security policies.

3.1 Google User Data

Connecting a Google account is optional. When you choose to connect one, Swashi requests only the permission needed for the feature you turn on, and connecting it never changes which Swashi account you are signed in to.

• Google Calendar: read-only unless you allow more. We show your upcoming events (title, start and end time) in your Swashi Meetings Calendar, and when a caller asks our AI receptionist for a meeting we check whether that time is free. Only if you separately allow adding bookings does our AI receptionist create calendar events for the bookings it confirms; it moves or removes only those events when a booking changes, and never changes or deletes your other events. Event details are read when you open the Meetings Calendar and are not stored on our servers, apart from the identifiers of events we created for you.
• Google Sheets: we write your leads only into the spreadsheet you create or open with Swashi. We cannot see any other file in your Google Drive.
• Google Search Console: when you connect it, we read your website's search performance and submit your sitemap and new pages to Google for indexing.

No AI, no advertising, no sale. Google user data is never sent to any AI model, and is never used to develop, improve or train artificial-intelligence or machine-learning models. We do not sell Google user data, do not use it for advertising, and do not transfer it to anyone except as necessary to provide the feature you use, for security, or to comply with the law.

How it is protected. Access tokens are stored in our database, encrypted at rest, and used only by our servers to provide the feature you connected.

Your control. You can disconnect Google Calendar at any time in Swashi (Brand Brain → Meetings Calendar → Disconnect). This revokes our access at Google and deletes the stored tokens. You can also remove Swashi from your Google Account under Security → Third-party apps with account access.

Swashi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3.2 Meta (Facebook and Instagram) Data

Connecting Facebook or Instagram is optional. When you connect one, Swashi uses Meta's permissions only for the features you turn on:

• Social Studio (posting): we list the Facebook Pages and Instagram business accounts you manage and publish the posts you create or approve in Swashi. Permissions: pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish, business_management.
• Ad Studio (paid ads): we list the ad accounts and Pages you manage, create ads in your own ad account — always paused until you press Start — start or pause them when you ask, and show their results (people reached, clicks, money spent) in Swashi. Permissions: ads_management, ads_read, business_management, pages_show_list, pages_read_engagement, pages_manage_ads. Swashi never pays for or charges your ads: Meta bills your ad account directly.

What we store. The access token Meta gives us (encrypted at rest), the IDs of the ad accounts, Pages, campaigns and ads you choose, and the results we show you. We do not request access to your friends list or your private messages.

No sale, no profiling, no AI training. Data received from Meta is never sold, never used to build advertising profiles, and never used to develop or train artificial-intelligence models. It is used only to provide the features you connected.

Your control. You can disconnect at any time: in Ad Studio press Disconnect Facebook, or disconnect the account in Social Studio. This deletes the stored access token. You can also remove Swashi in Facebook under Settings & privacy → Settings → Business integrations. For full instructions, see our Data Deletion section.

4. Credentials & Security

AI compute is built into the Swashi platform — you never need to bring or manage your own AI provider keys. Any credentials you connect (such as CMS, store, or social-account access to publish on your behalf) are:

• Encrypted at rest using AES-256 encryption
• Transmitted securely using HTTPS/TLS
• Never shared, sold, or exposed publicly

Access to sensitive systems is restricted and monitored to prevent unauthorized access.

5. Data Retention

We retain your data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

You may request deletion of your account and associated data at any time, subject to legal or contractual retention requirements.

5.1 Data Deletion (including Facebook and Instagram data)

This page explains how to delete the data Swashi holds about you, including data received from Facebook and Instagram (Meta).

• Ad Studio: open Ad Studio and press Disconnect Facebook in the launch step. The stored Meta access token is deleted immediately.
• Social Studio: open Social Studio and disconnect the Facebook Page or Instagram account. Its stored access token is deleted.
• From Facebook: go to Facebook → Settings & privacy → Settings → Business integrations, select Swashi and remove it. This revokes Swashi's access at Meta.

To delete your Swashi account and all data linked to it — including the IDs and results of your campaigns and ads, connected-account tokens and the content you created in Swashi — contact us from the email address of your Swashi account and ask for account deletion. We confirm your request and complete the deletion within 30 days, except records we must keep by law (for example, billing records).

Campaigns and ads that Swashi created in your own Meta ad account belong to you and stay in that ad account. Deleting your Swashi data does not delete them; you can pause or delete them in Meta Ads Manager.

6. Your Privacy Rights

Depending on your location, you may have rights including:

• Accessing the personal data we hold about you
• Requesting correction or deletion of your data
• Restricting or objecting to certain processing
• Requesting data portability

7. Cookies & Tracking

Swashi uses essential cookies and similar technologies to maintain authentication, security, and basic analytics. We do not use invasive third-party tracking cookies.

8. Children’s Privacy

Swashi is not intended for individuals under the age of 13. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

10. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us through the official Swashi support channels. Also see our Terms of Service.