Privacy Policy

This policy covers personal information processed through the Site. It does not cover the separate S.W.A.R.M. product/platform offered to business customers, which is governed by the agreement (e.g., a Master Services Agreement and Data Processing Addendum) between us and that customer. For product data, the business customer is generally the “controller” and we act as a “processor / service provider.”

Controller / business of record: [LEGAL ENTITY], [MAILING ADDRESS]. Privacy contact: hello@swarmdatasystems.com (or [PRIVACY EMAIL]).

We aim to collect the minimum necessary. Today, the Site is a largely static marketing site with no advertising or analytics trackers. We may collect the following categories:

• Information you submit — if and when you use a form (e.g., to request a demo), we collect the identifiers and contact details you provide, such as name, work email, company, phone (optional), team size, and any message. (Note: demo and login forms are currently illustrative previews and do not transmit data; this section describes processing once they are activated.)
• Communications — if you email us, we receive your message and contact details.
• Essential device/usage data — standard server logs (e.g., IP address, browser type, pages requested, timestamps) generated by our hosting provider for security and reliability.
• Essential local storage — a single session-only flag (swarm-intro-seen) so the assistant intro does not replay; it is cleared when you close your browser tab. See our Cookie Policy.

We do not knowingly collect Social Security numbers, precise geolocation, biometric data, or other sensitive personal information through the Site, and we do not use it for targeted advertising.

• Respond to your inquiries and schedule or deliver demos you request.
• Operate, secure, maintain, and improve the Site.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under the CCPA/CPRA and similar laws).

The Site currently uses only strictly-necessary browser storage and sets no advertising or analytics cookies. If we introduce analytics or other non-essential technologies in the future, we will request your consent (where required) through our cookie banner first. For details and your controls, see the Cookie Policy.

We disclose personal information only as needed:

• Service providers / processors — e.g., our hosting/CDN provider (Vercel) and email tooling, who process data on our behalf under contract. Web fonts are self-hosted (no third-party font requests).
• Legal & safety — to comply with law, respond to lawful requests, or protect rights, property, and safety.
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to this policy.
• With your direction or consent.

In the preceding 12 months we have not sold or shared personal information.

Depending on where you live (e.g., California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws), you may have the right to:

• Know/access the personal information we hold about you and how we use it.
• Delete personal information, subject to exceptions.
• Correct inaccurate personal information.
• Obtain a portable copy of your information.
• Opt out of sale, sharing, or targeted advertising (we do none of these).
• Limit the use of sensitive personal information (we collect none via the Site).
• Not receive discriminatory treatment for exercising your rights.
• Appeal a decision on your request.

How to exercise your rights

Email hello@swarmdatasystems.com (or [PRIVACY EMAIL]) with your request. We will verify your identity (and an authorized agent’s authority, if applicable) and respond within the timeframe required by law (generally 45 days, with a permitted extension). To appeal, reply to our decision and we will reconsider. California “Shine the Light” requests may be sent to the same address.

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/share where applicable. Because there is no universally adopted standard for “Do Not Track” (DNT) headers, the Site does not respond to DNT signals differently; however, the Site sets no tracking cookies regardless.

The Site is a business-to-business service intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us information, contact us and we will delete it. (See COPPA.)

We retain personal information only as long as necessary for the purposes described here or as required by law, then delete or de-identify it. We use reasonable administrative, technical, and organizational safeguards to protect personal information; however, no method of transmission or storage is 100% secure.

We are based in the United States and process information there. If you are in the EEA, UK, or Switzerland, our legal bases for processing are: your consent; performance of a contract or steps at your request; compliance with legal obligations; and our legitimate interests in operating and securing the Site. You have rights to access, rectify, erase, restrict, port, and object to processing, and to lodge a complaint with your supervisory authority. Where we transfer data internationally, we rely on appropriate safeguards (e.g., Standard Contractual Clauses). EU/UK representative: [EU/UK REPRESENTATIVE].

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

Questions or requests: hello@swarmdatasystems.com · [LEGAL ENTITY], [MAILING ADDRESS]. See also our Terms of Service and Cookie Policy.