Privacy Policy

1. Introduction

Caqophony ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Swarm and related services.

By using our Service, you consent to the data practices described in this policy. If you do not agree with the data practices described, you should not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Payment Information: Billing address and payment details (processed securely by Stripe)
• Profile Information: Organization name and other optional profile data
• Communications: Messages you send to us for support or feedback

2.2 Information Collected Automatically

• Usage Data: Token consumption, API calls, feature usage patterns
• Device Information: Browser type, operating system, IP address
• Log Data: Access times, pages viewed, errors encountered
• Cookies: Session cookies and authentication tokens

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google or GitHub, we receive basic profile information
• Payment Processor: Transaction confirmations from Stripe

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process transactions and manage subscriptions
• Send important notices about your account
• Respond to your inquiries and support requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Enforce our Terms of Service and other policies

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party services that help us operate the Service (e.g., Stripe for payments, Anthropic for AI processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords
• Regular security audits and monitoring
• Access controls limiting employee access to user data
• API keys stored using industry-standard hashing (bcrypt)

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information:

• Account Data: For as long as your account is active
• Usage Data: For up to 90 days for operational purposes
• Audit Logs: For up to 90 days for security and compliance
• Payment Records: As required by tax and accounting regulations

You may request deletion of your account and associated data at any time.

7. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@caqophony.com.

8. Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for authentication and security
• Analytics Cookies: To understand how users interact with the Service (Vercel Analytics)

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

9. Third-Party Services

Our Service integrates with:

• Stripe: For payment processing (Stripe Privacy Policy)
• Anthropic: For AI processing (Anthropic Privacy Policy)
• Vercel: For hosting and analytics (Vercel Privacy Policy)
• Sentry: For error tracking (Sentry Privacy Policy)

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@caqophony.com