Last updated: 2026-04-26
Placeholder: This document is a template — replace with legal copy reviewed by counsel before launch.
1. Information We Collect
When you use SwooshRank, we collect information necessary to provide and improve the Service:
- Account information: name, email address, and password (hashed)
- Payment information: billing address and payment method details, processed securely by Stripe
- Content and usage data: articles, content you input or generate, keyword targets, publishing integrations, and usage metrics
- Analytics data: browser type, device type, pages visited, time on page, referrer, and IP address (anonymized)
- Communication data: support messages, feedback, and inquiries
2. How We Use Your Information
We use the information we collect for the following purposes:
- Operate, maintain, and improve SwooshRank
- Process payments and manage your subscription
- Generate and optimize AI-powered content recommendations
- Send transactional emails (account updates, billing notices)
- Provide customer support and respond to inquiries
- Analyze usage patterns to improve features and user experience
- Comply with legal obligations
3. Information Sharing and Sub-processors
We do not sell, trade, or rent your personal data. We share information with trusted service providers who assist us in operating the Service:
- Stripe: payment processing and billing
- Clerk: authentication and user management
- OpenAI and Anthropic: AI-powered content generation (sent inputs/outputs only, not personal data)
- Resend: transactional email delivery
- Vercel: hosting and edge functions
- Railway: database and infrastructure hosting
Each sub-processor has been selected for security and privacy practices. We require all sub-processors to maintain confidentiality and comply with applicable data protection laws.
4. Cookies and Similar Technologies
We use cookies to enhance your experience:
- Essential cookies: required for authentication, session management, and security
- Analytics cookies: help us understand how users interact with the Service to improve features and performance
We do not use third-party advertising cookies or tracking cookies. You can disable cookies in your browser settings, but some features may not function properly.
5. Your Privacy Rights
Depending on your location, you may have the right to:
- Access: request a copy of your personal data via /api/gdpr/export
- Deletion: request deletion of your personal data via /api/gdpr/delete
- Portability: receive your data in a machine-readable format via /api/gdpr/export
- Correction: update inaccurate information in your account
- Objection: object to processing of your data under certain circumstances
To exercise any of these rights, email legal@swooshrank.com with your request and proof of identity.
6. GDPR Compliance (EU Users)
If you are located in the European Union, United Kingdom, or other regions with GDPR-equivalent laws, we process your data as a data controller under the GDPR. You have additional rights under the GDPR, including the right to withdraw consent and lodge complaints with your local supervisory authority. For any GDPR-related inquiries, contact legal@swooshrank.com.
7. CCPA Compliance (California Users)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information. You have the right to know what personal information is collected, how it is used, and to whom it is disclosed. You also have the right to delete personal information collected from you and to opt-out of the sale or sharing of your information (we do not sell or share personal data). To exercise your CCPA rights, email legal@swooshrank.com.
8. Data Retention
We retain your personal data while your account is active. When you close your account, we delete your data within 30 days, except where retention is required by law. Billing records may be retained for compliance with financial regulations.
9. International Data Transfers
SwooshRank operates in the United States. If you access the Service from outside the US, your data will be transferred to, stored in, and processed in the United States. By using the Service, you consent to the transfer of your data to the US. For international data transfers from the EU or other regions, we use Standard Contractual Clauses approved by relevant authorities.
10. Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256). However, no security system is impenetrable. We cannot guarantee absolute security of your information.
11. Changes to This Policy
We may update this Privacy Policy at any time. Changes will be effective immediately upon posting. We encourage you to review this policy periodically for updates. Your continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact
If you have questions or concerns about our privacy practices, please contact us at legal@swooshrank.com.
This is initial boilerplate pending review by qualified counsel. Refer to the latest version at /legal/privacy.