Section 1
Introduction
SwiftPane.com ("we", "us", or "our") operates the SwiftPane platform ("the Service"), a template design and management tool for teams. This Privacy Policy describes how we collect, use, and protect your personal information when you access or use our Service.
By using SwiftPane, you consent to the data practices described in this policy. If you do not agree with any part of this policy, please discontinue use of the Service.
Our commitment: We collect only the information necessary to provide and improve our Service. We never sell your personal data to third parties.
Section 3
How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: To provide, maintain, and operate the SwiftPane platform, including storing and serving your designs and data sources.
- Authentication & security: To verify your identity, manage user sessions, enforce role-based access controls, and protect against unauthorized access.
- Billing & subscriptions: To process payments, manage subscription status, and communicate about billing-related matters.
- Communications: To send account-related emails including invitations, email verification, password resets, and service notifications.
- Improvements: To analyze usage patterns and improve the functionality, performance, and user experience of the Service.
- Legal compliance: To comply with applicable laws, regulations, and legal processes.
Section 4
Data Storage & Security
We take the security of your data seriously and implement appropriate technical and organizational measures to protect it.
- Content storage: Your design assets (images, templates, data source files) are stored on Cloudflare R2 cloud storage, organized by organization and accessible only to authenticated members of your organization.
- Database encryption: Account data and application records are stored in encrypted databases with restricted access controls.
- Access controls: All content is served through authenticated API endpoints with role-based permissions (admin, designer, general).
- File security: Uploaded SVG files are sanitized to remove scripts and event handlers. Raster images are re-encoded to strip EXIF metadata.
- Secure transmission: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
- Session management: User sessions are managed with secure, server-side session storage with configurable timeouts.
Important: While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.
Section 5
Third-Party Services
We use the following third-party services to operate SwiftPane. Each has its own privacy policy governing how they handle your data:
- Stripe: Payment processing and subscription management. Your payment card details are sent directly to Stripe and are never stored on our servers. See Stripe's Privacy Policy.
- Cloudflare: Content storage (R2) and network delivery. Your uploaded files are stored on Cloudflare infrastructure. See Cloudflare's Privacy Policy.
- Amazon Web Services (AWS): Email delivery via Amazon SES for transactional emails (invitations, verification, notifications). See AWS Privacy Policy.
- Google Fonts: Font loading for the application interface and canvas editor. See Google's Privacy Policy.
We select third-party providers that maintain strong security practices and privacy commitments. We only share the minimum data necessary for each service to function.
Section 6
Cookies & Tracking
SwiftPane uses cookies and similar technologies to provide and secure the Service:
- Session cookies: Essential cookies used to maintain your authenticated session and remember your login state. These are required for the Service to function.
- CSRF tokens: Security cookies used to protect against cross-site request forgery attacks.
- Preference cookies: Used to store your preferences such as theme selection (light/dark mode) and walkthrough completion status.
We do not use advertising cookies, tracking pixels, or third-party analytics services that track your activity across other websites. We do not engage in behavioral profiling or targeted advertising.
No cross-site tracking: SwiftPane does not track you across other websites or sell any browsing data to advertisers.
Section 7
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:
- Within your organization: Your content is visible to other authenticated members of your organization in accordance with role-based permissions.
- Service providers: With third-party providers listed above, solely to the extent necessary for them to deliver their services (e.g., Stripe for payments, AWS for email delivery).
- Legal requirements: When required by law, regulation, legal process, or enforceable governmental request.
- Protection of rights: When we believe disclosure is necessary to protect the rights, property, or safety of SwiftPane, our users, or the public.
- Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this privacy policy or a policy at least as protective.
Section 8
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: You can access your account information and content at any time through the Service.
- Export: You can export your designs as PDF files through the editor at any time.
- Correction: You can update your account information, organization details, and profile through the Settings page.
- Deletion: You can request deletion of your account and associated data by contacting our support team. Organization administrators can remove users and their access.
- Objection: You can object to certain processing of your personal data by contacting us.
- Portability: You can request a copy of your personal data in a structured, commonly used format.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Section 9
Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained for the duration of your active account. Upon account termination, personal data is deleted within a reasonable period.
- User content: Templates, images, and data source files are retained while your account is active. We recommend exporting your designs before cancelling your account.
- Billing records: Retained as required by applicable tax and financial reporting laws, typically for a minimum period following the end of your subscription.
- Session logs: Session data is automatically purged based on configured session lifetime settings.
- Backups: Deleted data may persist in encrypted backups for a limited period before being permanently removed.
Section 10
Children's Privacy
SwiftPane is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] so we can take appropriate action.
Section 11
International Data
SwiftPane is operated from Australia. If you access the Service from outside Australia, your information may be transferred to, stored, and processed in Australia or other jurisdictions where our service providers operate.
By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.
Section 12
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify users via email or through a notice within the Service.
We encourage you to review this policy periodically. The "Effective" date at the top of this page indicates when this policy was last updated. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.