Privacy Policy
Last updated Oct 15, 2026. This is a plain-English draft written by Swarmnest. It has not yet been reviewed by a lawyer and it is not legal advice. Questions: hello@swarmnest.ai.
This policy explains how Swarmnest (owned and operated by J S in California, USA; "we", "us") handles personal information when you use swarmnest.ai, our API, our marketplace and our emails. We are the party responsible for your information (the "controller" under laws such as the GDPR). Contact: hello@swarmnest.ai.
The short version: there are no user accounts today, we do not run advertising trackers, we do not sell or share your personal information for advertising, and we collect only what we need to run the site, sell products and answer you.
1. What we collect
When you visit the site or call the API
Our hosting and network provider, Cloudflare, processes standard request data to deliver and protect the site: IP address, browser or client type (user agent), the page or endpoint requested, referring page, date and time, and approximate location derived from the IP address. Cloudflare uses this for security (for example, blocking attacks and bots) and gives us aggregated traffic statistics. We may also turn on Cloudflare Web Analytics, a privacy-focused tool that counts page views and performance without cookies and without building profiles of individual visitors. We do not use Google Analytics, ad pixels or cross-site tracking.
When you email us
If you email hello@swarmnest.ai (including to submit a tool, request a correction or takedown, ask about sponsorship, or ask about the waitlist), we receive your email address, name if you include it, and whatever you write.
When you join the newsletter or waitlist
We collect your email address, the date you signed up, which form you used (newsletter or a product waitlist), your approximate country (from Cloudflare) and the wording you agreed to. This is stored in Cloudflare KV, our hosting provider's key-value store. We will ask you to confirm by email before sending marketing. If we use an email service to send the newsletter, it may record whether emails are delivered, opened or clicked, so we can see what is useful. We will name that service in this policy when the newsletter launches.
When you buy something
Checkout is handled by Stripe. Stripe collects your payment details, email address, and billing details such as name, country and postal code (and sometimes a full address or tax ID, where needed to calculate tax). We do not receive or store your full card number. Stripe gives us your name, email, billing country and postal code, what you bought, the amount, tax charged, and limited card details such as the card brand and last four digits. Stripe also uses device and transaction data to prevent fraud. Stripe's use of your information is described in the Stripe Privacy Policy.
If we add accounts or third-party sellers
We would collect your login email, profile details and purchase history; for sellers, the identity, business, tax and payout information that we and Stripe need to pay you and meet legal obligations. We will update this policy before launching those features.
We do not intentionally collect sensitive personal information (such as health data, precise location or government ID numbers) from buyers, and we ask you not to send it to us.
2. Why we use it
| Purpose | Information | GDPR legal basis |
|---|---|---|
| Running, securing and fixing the site and API | Request data | Legitimate interests (keeping the Service working and safe) |
| Understanding traffic in aggregate | Request data, cookieless analytics | Legitimate interests |
| Selling and delivering products, receipts, support, refunds | Order and contact data | Performing our contract with you |
| Tax, accounting, fraud prevention and legal compliance | Order and payment data | Legal obligation; legitimate interests |
| Replying to emails, submissions, corrections and takedowns | What you send us | Legitimate interests; legal obligation for copyright notices |
| Newsletter and waitlist emails | Email address | Your consent, which you can withdraw at any time |
We do not use your information for automated decisions that have legal or similarly significant effects on you, and we do not use personal information you send us to train AI models.
3. Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with:
- Service providers that process it for us: Cloudflare (hosting, security, analytics), Stripe (payments, tax calculation, fraud prevention), our email provider for the hello@swarmnest.ai mailbox, and, once launched, our newsletter provider. They may only use it to provide their services to us.
- Creators, if we later open the marketplace to outside sellers: when you buy a creator's product, we may share your name, email and order details with that creator so they can support the product and meet their own legal duties.
- People who send copyright notices or counter-notices, as required by the DMCA process described on our Takedown page.
- Authorities and others where the law requires, or where needed to protect rights, safety or the Service, such as in response to valid legal process.
- A buyer or successor if Swarmnest is sold, merged or reorganized, under a policy at least as protective as this one.
4. Cookies
We do not set advertising or tracking cookies. Cloudflare may set strictly necessary security cookies, and Stripe sets cookies on its own checkout pages. See the Cookie Notice.
5. How long we keep it
- Order and payment records: as long as needed for tax, accounting and legal purposes, generally up to 7 years after the purchase.
- Emails and submissions: as long as needed to deal with them, and generally no longer than 2 years after our last contact, unless we need them for a legal claim. Copyright notices and counter-notices may be kept longer as a record.
- Newsletter and waitlist: until you unsubscribe or ask us to delete your address. We may keep a minimal record that you unsubscribed so we do not email you again.
- Request logs and analytics: held by Cloudflare for limited periods under its own retention practices; we keep only aggregated statistics.
6. Your rights
Wherever you live, you can ask us to tell you what personal information we hold about you, give you a copy, correct it, or delete it, and you can unsubscribe from marketing emails at any time. Email hello@swarmnest.ai. We will reply within 30 days (45 days for California requests, which the law allows us to extend once by another 45 days where reasonably necessary). We may need to confirm your identity, usually by asking you to reply from the email address we have on file. We will not treat you differently for using your rights.
California residents (CCPA/CPRA)
California law gives you the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing; to limit use of sensitive personal information; and not to be discriminated against for using these rights. You may use an authorized agent, and we may ask the agent for proof that you authorized them. In the last 12 months we have collected these categories: identifiers (such as email and IP address), commercial information (purchases), internet activity (request data), approximate geolocation derived from IP, and the content of messages you send us. Sources are you, your device, and our service providers. Purposes are those in section 2. We disclose them only to the recipients in section 3, for business purposes. We do not sell or share personal information and have not done so; see Do Not Sell or Share. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit. We do not disclose personal information to third parties for their own direct marketing (California "Shine the Light" law).
EU, EEA and UK residents (GDPR/UK GDPR)
You have the rights to access, correct, delete, restrict or object to our use of your personal information, to data portability, and to withdraw consent at any time (this does not affect use before you withdrew). You can complain to your local data protection authority. We are based in the US, so your information is processed in the US and by providers such as Cloudflare and Stripe, which use recognized transfer mechanisms such as standard contractual clauses or the EU-US Data Privacy Framework where available.
7. Do Not Track and Global Privacy Control
We do not track you across other websites, so we do not change our behavior in response to browser "Do Not Track" signals. We treat a Global Privacy Control (GPC) signal as a request to opt out of sale or sharing; since we do not sell or share personal information, no further action is needed today.
8. Children
The Service is not directed at children under 13, and buying requires being 18 or older. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK without parental consent). If you believe a child has sent us personal information, email us and we will delete it.
9. Security
We use reputable providers, HTTPS throughout the site, and limit who can access personal information. No method of transmission or storage is completely secure, so we cannot guarantee security. If a breach affects your personal information, we will notify you where the law requires.
10. Changes
We will update this policy when our practices change, for example when the newsletter, accounts or third-party sellers launch, and change the "Last updated" date. For significant changes we will give notice on the site or by email where we have your address.
11. Contact
Swarmnest, owned and operated by J S, California, USA. Email: hello@swarmnest.ai.
Related policies
Terms of Use · Cookie Notice · Do Not Sell or Share · Acceptable Use Policy · Product License · Refund Policy · Sales Tax Notes · Sponsored & Affiliate Disclosure · API Terms · Takedown & Corrections · DMCA Designated Agent · Creator Agreement (draft) · Accessibility Statement