1. Scope
Swift Digital Solutions LLC ("we", "us", or "our") operates SwiftFlow, a social media management platform for businesses. This Privacy Policy explains what information we collect, store, process, and delete when you use the product, including data accessed through Meta products such as Facebook Pages and Instagram Business accounts.
2. Information We Process
The categories below reflect the current product behavior and supported platform-connected workflows.
- Workspace and account information: user account identifiers, workspace membership, roles, and basic profile details needed to authenticate and authorize access.
- Connected social account records: Facebook Page IDs, Instagram Business account IDs, usernames, account names, profile pictures, granted scopes, token expiry timestamps, and connection metadata.
- Authentication secrets: Meta tokens and workspace AI provider keys. These are stored encrypted at the application layer and used only in server-side routes and server-side functions.
- Post data: draft posts, scheduled posts, published post content, media URLs, target platforms, schedule timestamps, publishing status, Meta-side published post IDs, and permalinks.
- Analytics data when enabled: follower metrics, engagement metrics, post analytics snapshots, and related sync timestamps.
- Comments and messages when enabled: comment content, conversation threads, message bodies, attachment metadata, participant usernames, and related account identifiers.
- Webhook and automation records when enabled: webhook event IDs, automation logs, processed trigger records, and execution context needed to prevent duplicate processing and maintain audit history.
- AI usage data: AI prompts, chat sessions, generated content, generated assets, image prompts, and provider/model metadata needed to deliver workspace AI features.
- Support and operational data: error logs, request metadata, invite emails, and deletion/support communications.
3. How We Use Information
- Authenticate users and enforce workspace permissions.
- Connect one Facebook Page and its linked Instagram Business account to a workspace.
- Create, schedule, and publish user-authored social content.
- Display connected account state, publishing history, and health or permission status.
- Generate AI-assisted draft content, image prompts, and reply suggestions.
- Operate analytics, comments, messaging, webhook, and automation features when those features are enabled in the product release and supported by granted permissions.
- Respond to support, compliance, and deletion requests.
We do not sell personal information or use Meta data for unrelated advertising resale. Meta data is used only to operate the product features authorized by the user.
4. Retention
- Connected account records and encrypted tokens are retained until the user disconnects the account, the workspace is deleted, or a deletion request is fulfilled.
- Post records, published post mappings, AI sessions, and generated assets are retained until they are deleted by the workspace or removed as part of an account deletion request.
- Webhook, automation, analytics, comments, and messaging records are retained only for product operation, troubleshooting, and audit needs, and may be deleted earlier if those features are disabled or a deletion request applies.
5. Security
- Workspace AI keys and Meta tokens are stored encrypted at the application layer.
- Secrets are used only in server-side routes or server-side functions, not exposed directly to other end users.
- Workspace access is restricted through authentication, role-based access control, and workspace-scoped data checks.
6. Data Sharing
We share data only with service providers needed to operate the product, such as Supabase for infrastructure and storage, Vercel for hosting, AI providers for requested AI tasks, and Meta for the platform actions the user authorizes.
7. Deletion Requests
You may request deletion of your workspace or connected-platform data at any time. Instructions are available on our Data Deletion page.