SwaruPrivacy policy
Last updated 1 November 2026
This policy explains what Swaru (Joseph Lines, a sole trader) does with personal data, for the businesses that use it and for the people who talk to their help chat.
Two kinds of data
Your account: the names and email addresses of you and your team, and your billing details (held by Lemon Squeezy, not by us). We are responsible for this data.Your customers' conversations: what visitors type into your chat, the support email you forward to us, and your team's replies and notes. We process this only on your behalf and on your instructions, to run the service for you.What we keep, and for how long
- Chat questions and answers, and forwarded email: 90 days.
- Inbox conversations: until closed, then one year after the last message, with any files attached to it.
- Your account: while you have one, and 30 days after it ends.
Card numbers and secret keys that customers paste are removed before anything is stored or sent to the AI. Files attached to email are never sent to the AI.
Who helps us run it
- Anthropic: the AI model that writes answers and suggestions (it does not use your data to train its models).
- Railway: hosting.
- Cloudflare: DNS.
- Postmark: sending and receiving email.
- Lemon Squeezy: payments, as merchant of record.
- Slack: only if your team connects a channel.
What we don't do
We don't sell data, show ads, or use your or your customers' data for anything but running the service. The chat on your site sets no tracking cookies; it keeps a reference to the visitor's conversation in their own browser so it survives a page change (the conversation itself is kept with us, as above).
Your rights
An admin of your team can download everything your company has with us at any time (the Plan page), and close your account there: it is deleted 30 days later, unless you reopen it. An account whose plan has ended, or that never took one, is closed the same way. After deletion we keep only our security log of what was done and by whom: it holds email addresses but never the text of a message.
You can ask us for a copy of your data, to correct it, or to delete it. A visitor who used your chat should ask you, the business, and we will help you answer. Where the GDPR or UK GDPR applies you can also complain to your data protection authority.