Privacy Policy
Last updated: April 15, 2026
1. Information we collect
When you use SwipeToolkit, we collect the following information to provide our service:
- Your email address, used to create and manage your account and to send transactional messages (password resets, billing receipts).
- Your name, used to personalise your experience within the application.
- API requests sent to our servers. We log requests (including prompts and responses) to operate the service, enforce usage limits, and improve reliability.
2. Chrome extension data
The SwipeToolkit Chrome extension requests the following browser permissions. We only use each permission for the purpose described below and do not collect or transmit any data beyond what is needed to deliver the feature.
| Permission | Why we need it |
|---|---|
activeTab | Read the text you select on the current page so the AI generator can use it as context. We only access the tab when you invoke the extension. |
storage | Store your authentication token and extension preferences locally on your device. |
contextMenus | Add a "Generate with AI" option to your right-click menu so you can trigger content generation from any page. |
scripting | Inject a small script into the active tab to extract your selected text when you use the context menu. |
Host access: *.upwork.com | Run a content script on Upwork job pages to extract job details and client information for proposal generation. |
| Host access: backend API | Send authenticated requests to our backend (app.swipetoolkit.com) to process AI generation, email validation, and WhatsApp messaging. |
The extension does not run in the background when you are not using it. It does not track your browsing history, collect analytics, or read page content unless you explicitly trigger an action (right-click menu, popup button, or the Upwork content script on job pages).
3. How we use your information
- Provide the service: process your requests, return results, and maintain your usage history.
- Authenticate you: verify your identity and keep your account secure.
- Communicate with you: send transactional emails and, where you have opted in, product updates.
We do not sell your personal information to third parties.
4. Third-party services
SwipeToolkit integrates with the following third-party services:
- OpenAI powers AI-assisted features. Your prompts and content may be processed by OpenAI in accordance with their privacy policy.
- Reoon is used for email validation to check deliverability before you send.
- Walytic is used for WhatsApp message delivery through the extension.
All calls to these services are made from our backend servers. Your API keys and credentials are never exposed to the browser or the extension.
5. Data security
We take reasonable technical and organisational measures to protect your data:
- Sensitive data at rest is encrypted using AES-256-GCM.
- All data in transit uses HTTPS.
- Third-party API keys are stored server-side and encrypted. They are never sent to the extension or exposed in the browser.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify you promptly if a breach affects your data.
6. Data retention
- Account data is retained for as long as your account is active.
- Request history is retained for 90 days and then automatically deleted.
- You may request deletion of your account and all associated data at any time by emailing us at the address below.
7. Your rights
You can request access to, correction of, or deletion of your personal data at any time. To make a request, email privacy@swipetoolkit.com. We will respond within 30 days.
8. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above. For material changes, we will notify you by email or a prominent notice within the service.
9. Contact
Questions about this policy or your personal data? Email us at privacy@swipetoolkit.com.