Privacy Policy

1. Who we are

SwayBlu is a social media scheduling and analytics platform that helps you create, store, schedule, publish, and measure social content across connected third-party platforms (for example, Facebook and Instagram).

Legal entity: SwayBlu (ABN 43 484 422 063) ("SwayBlu", "we", "us", "our")
Business address: 6–8 Nile Close, Marsfield, NSW 2122, Australia
Contact: privacy@swayblu.com

This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the rights you have under applicable privacy laws (including the Australian Privacy Act and Australian Privacy Principles, GDPR/UK GDPR, and US state privacy laws such as CPRA where relevant).

2. What information we collect

The information we collect depends on how you use SwayBlu.

2.1 Account and profile information

• Name, email address, password (stored in hashed form), and account settings
• Business or organisation name (if provided)
• Plan/subscription status and billing history (not full payment card details)

2.2 Content you provide to SwayBlu

• Post content you create or upload: captions, hashtags, images, videos, drafts, scheduled times
• Brand assets you store: brand colors, logos, templates, style preferences, and similar inputs you choose to save

2.3 Connected social account information

When you connect a third-party social platform (e.g., Meta/Facebook/Instagram), we may receive and store:

• Account/page identifiers, page names, profile image, and connection status
• Access tokens and permissions needed to perform actions you authorise (we do not ask for or store your social platform passwords)
• Analytics/insights data made available by the platform APIs (e.g., engagement metrics, post performance)

2.4 Payment and subscription information

Payments are processed by third-party payment providers (for example, Stripe or similar). We receive records needed to manage your subscription (such as plan type, payment status, invoice IDs). We do not store your full card number.

2.5 Usage, device, and log information

We automatically collect:

• Device and browser details, IP address, app events (e.g., button clicks, page views), timestamps
• Error logs and security logs (to protect the service and diagnose issues)

2.6 Support communications

If you contact us, we collect the information you provide in your message, and any attachments you send.

2.7 Cookies and similar technologies

We use cookies/local storage/session storage (or similar technologies) for:

• Essential sign-in/session functionality
• Security and fraud prevention
• Preferences (e.g., remembering settings)
• Analytics to improve the product

See Section 11.

3. How we use your information

We use information for the following purposes:

• Provide the service: create accounts, authenticate users, store assets, schedule/publish posts, display analytics
• Operate integrations: connect to third-party social platforms and perform actions you authorise
• Improve SwayBlu: product analytics, debugging, performance monitoring, feature development
• Customer support: respond to requests and troubleshoot issues
• Billing: process subscriptions, manage invoices, prevent payment fraud
• Security and compliance: protect against abuse, enforce our Terms, comply with legal obligations

4. AI Improvement Program (training and product development)

We want to build better trend analysis, recommendations, and creative tooling over time. We may do this using:

• Aggregated/de-identified usage and performance data to improve features such as trend insights and forecasting.
• User content and brand inputs (optional) to improve SwayBlu's AI features (for example, improving prompt templates, style matching, or internal models).

Your control:

• The AI Improvement Program is enabled by default only where permitted by law.
• In some regions (including the EEA/UK), it is off by default unless you explicitly enable it.
• You can change this anytime in Settings, or by emailing privacy@swayblu.com.
• If you opt out, you can still use SwayBlu.

5. Legal bases (GDPR/UK GDPR users)

Where GDPR/UK GDPR applies, we process personal data under one or more of these legal bases:

• Contract: to deliver SwayBlu as requested (account, scheduling, analytics)
• Legitimate interests: to secure and improve the service, prevent fraud, maintain reliability
• Consent: for non-essential cookies and certain marketing communications (where required)
• Legal obligation: where we must retain or disclose information to comply with law

6. How we share information

We do not sell your personal information.

We share information only as needed:

6.1 Service providers (processors)

We use vendors to run SwayBlu (for example: hosting, databases, storage, email delivery, analytics, payment processing, customer support tooling). They are authorised to process data only to provide services to us and must protect it.

6.2 Social platform integrations (third parties you connect)

When you connect accounts and publish content, the connected platform receives the content and metadata required to publish (and may provide us analytics back). Your use of those platforms is governed by their terms and privacy policies.

6.3 Legal, safety, and enforcement

We may disclose information if required by law or to:

• respond to valid legal requests
• protect rights, safety, and security of users, SwayBlu, or the public
• investigate fraud or abuse
• enforce our Terms

6.4 Business transfers

If we're involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will provide notice where required.

7. International data transfers

SwayBlu is based in Australia, and our service providers may process data in other countries. Where required, we use appropriate safeguards for cross-border transfers (such as contractual protections).

8. Data retention

We keep personal information only as long as needed to:

• provide the service
• meet legal/accounting requirements
• resolve disputes
• enforce agreements

Account deletion: If you delete your account (or request deletion), we will delete or de-identify personal information unless we must keep certain records (for example, invoices for tax/compliance).

Backups: Data may persist in encrypted backups for a limited period before being overwritten.

Target timelines:

• Core account data removal begins promptly after deletion
• Residual deletion from backups and downstream systems: up to 90 days
• Legal/tax records retained as required by law

9. Security

We use reasonable technical and organisational measures to protect information, including access controls and encryption in transit (and where appropriate, at rest). No system is perfectly secure. You are responsible for keeping your login credentials confidential and using a strong password.

10. Your rights and choices

Depending on where you live, you may have rights to:

• access the personal information we hold about you
• correct inaccurate information
• delete your information
• object to or restrict certain processing
• receive a copy of your information (data portability)
• withdraw consent (where processing is based on consent)

10.1 Australia (Privacy Act / APPs)

You can request access or correction of personal information and make a complaint about privacy handling.

10.2 EU/UK (GDPR/UK GDPR)

You may have additional rights including objection and restriction, and the right to lodge a complaint with your supervisory authority.

10.3 California and other US states (CPRA and similar)

Where applicable, you may have rights to know, delete, and correct personal information, and to opt out of certain sharing for targeted advertising. SwayBlu does not sell personal information.

How to exercise rights: email us at privacy@swayblu.com from the email address linked to your account. We may verify identity before acting on requests.

11. Cookies and tracking

We use:

• Essential cookies for login/session and security
• Functional cookies for preferences
• Analytics cookies to understand usage and improve the product

You can control cookies via browser settings. Some essential features may not work without essential cookies.

12. Children

SwayBlu is not intended for children under 13 (and not for under 16 where GDPR requires). We do not knowingly collect data from children.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version and revise the "Last updated" date. If changes are material, we may provide additional notice.

14. Contact us