This Privacy Policy describes how Swarmvestor collects, uses, and protects information when you use our platform. We are committed to transparency and safeguarding your data.
Information We Collect
When you sign in to Swarmvestor, we collect basic profile information provided by your OAuth provider. This includes:
- Email address — used to identify your account
- Display name — used to personalize your experience
- Profile image — if provided by the OAuth provider
We do not collect passwords directly. Authentication is handled entirely by your chosen OAuth provider (e.g., Google, GitHub) through our authentication service.
How We Use Your Data
Your information is used for the following purposes:
- Account creation — we use Clerk to manage authentication and create your user profile
- Platform access — to grant you access to Swarmvestor features, swarms, and trading tools
- Communication — to send important service updates if necessary
We do not sell, trade, or rent your personal data to third parties.
Data Storage
Your account data and application state are stored securely using Convex, our real-time backend platform. Convex provides encrypted storage and secure data transmission.
Authentication tokens and session data are managed by Clerk and are not stored directly by Swarmvestor.
Application Data
In addition to OAuth profile information, Swarmvestor stores data you generate while using the platform: swarm and agent configuration, chat threads with agents, trade history and transaction signatures, top-up records, and platform usage credit ledger entries. Swarm wallet seeds (mnemonic or private key) are stored in Azure Key Vault, a managed secret store — not in our application database. Our backend fetches the secret from Key Vault only when your agent needs to sign a transaction; the derived keypair lives in memory for the duration of that signature and is then discarded. You can export your seed at any time and import it into any Solana wallet.
Application data is retained while your account is active. Self-service account deletion is not yet available; deletion requests are handled manually — contact support to delete your account and associated data.
SMS Messaging and Mobile Information
We collect mobile phone numbers and SMS consent preferences only when a user voluntarily provides them in account settings. We use this information solely to send the categories of text messages the user has opted into (service-related and/or agent conversations) and to maintain records of consent.
We do not sell, rent, or share mobile phone numbers or SMS opt-in data with third parties or affiliates for their marketing or promotional purposes. Service providers (such as our SMS delivery vendor) may process this data on our behalf solely to deliver the messaging program.
Users may revoke consent at any time by replying STOP to any message or by disabling SMS in account settings. For details on the SMS program, see our SMS Terms.
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can also revoke OAuth access through your provider's account settings.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date.