SwoopChat Privacy Policy

1. Who we are and what this policy covers

Swoop Insights LLC, a Wyoming, United States limited liability company doing business as SwoopChat ("SwoopChat," "we," "us," or "our"), operates swoopchat.ai and AI Prompt Companion by Swoopchat, our Chrome extension.

This policy explains how we collect, use, store, and disclose personal information in connection with our website, accounts, AI features, Chrome extension, payments, and support (together, the "Services"). SwoopChat is responsible for the processing it determines and, where applicable, acts as the controller of that information.

Contact us about privacy, access, correction, or deletion at hello@swoopchat.ai. Please identify whether your request concerns the website, Chrome extension, or both. Do not email passwords, verification codes, full payment-card details, or other unnecessary sensitive information.

Third-party websites where you use the extension have their own data practices. This policy does not control their handling of information you insert into their pages.

2. Information we collect or handle

Account and authentication information. We handle your email address, supplied name, account identifiers, account status, and information needed for signup, verification, sign-in, and account recovery. The extension sends passwords and verification codes to SwoopChat's Base44 authentication service; it does not save your password. It stores a session token locally to keep you signed in.

Prompts, conversations, and submitted content. We handle prompts, selected text, chat messages, rewriting instructions, AI responses, generated content, and content you choose to submit through available website features. Where a feature supports files, images, video, or shared workspaces, this includes the content and associated information you submit or share through that feature. Content can contain personal or sensitive information if you choose to include it.

Account usage and credit information. We handle plan information, credit balances, usage and generation records needed to operate the Services, and related transaction information. The extension retrieves account and credit information from the server and caches the reported balance locally. It also reports signup/sign-in attribution identifying the extension as the account source.

Payment information. Stripe processes payments for paid Services. Stripe receives payment and billing information necessary for checkout, subscriptions, fraud prevention, and related obligations. We receive information needed to manage your purchase, such as payment status, subscription and customer identifiers, transaction amounts, and billing details provided by the payment integration. The Chrome extension does not request full payment-card details.

Device, connection, and operational information. When you contact our website or service providers, request information such as IP address, browser/device information, timestamps, requested resources, identifiers, and error or security information may be processed in connection with delivering and securing those services. Website cookies, browser storage, and embedded content are described in Section 8.

Support information. We handle information you send through our contact form, email, or other support channels, including your contact information and the contents of your request.

3. How the Chrome extension works

The extension's single purpose is to help you rewrite prompts you choose into AI-generated alternatives, from its popup or a supported chat composer, using your SwoopChat account and website credits.

When you choose Generate or click inline Optimize, the extension sends your chosen prompt and rewriting instructions to SwoopChat's authenticated Base44 backend. That backend uses Grok to generate three prompt alternatives and applies usage to your shared SwoopChat credit balance. Your account token authenticates the request to SwoopChat's backend; the extension does not expose that token to the chat webpage.

Merely visiting a page, typing, viewing saved results, copying a result, selecting a template, or choosing an already-generated alternative does not start another AI generation request.

The extension currently has broad site access so its content script can recognize supported and custom AI chat composers and display Optimize controls. It inspects the current hostname, page title, and relevant page structure locally. It reads the selected composer's prompt when you request optimization and can insert a rewrite through Optimize or Use This. Its optimization request does not send the entire page or your browsing history.

The extension does not automatically send a chat message. However, once text is inserted into a third-party composer, that website can access the draft and may process or autosave it before you press Send. That processing is governed by the website's own terms and privacy policy.

The extension uses:

• Storage: settings, saved prompt history, pending selected text, account token, and cached credit information.
• Context menus: opening text you select in the prompt optimizer.
• Clipboard write access: copying a result when you choose Copy.
• Base44 network access: account authentication, account/credit retrieval, and prompt optimization.
• Content-script site access: recognizing composers, showing controls, and inserting a selected rewrite.

You can manage the extension's permitted site access through Chrome's extension settings. Restricting access may prevent inline features from operating on a site; the popup remains a separate interface subject to its account and network requirements.

4. How website AI features use information

Website features may use Grok, ChatGPT, Gemini, or Claude, depending on the model or feature you choose. Multi-model comparison may send your prompt to multiple providers. Synthesis features may pass model responses, together with your instructions, to another model to produce a combined result. Image or video features may send the material needed for the generation you request.

The website's multi-model processing is distinct from the Chrome extension's current Grok optimization path. A provider is not necessarily involved in every request. Please review the selected feature and avoid submitting secrets, highly sensitive information, or information you are not authorized to share.

Where collaboration features are available, content you deliberately share may be visible to the participants with whom you share it. Copies retained by other participants may not be removed by deleting your own copy.

5. Why we use information

We use information to:

• Create and authenticate accounts, verify email addresses, and maintain sessions.
• Carry out the AI generation, comparison, rewriting, synthesis, and other features you request.
• Display results, maintain the history or content you choose to save, and support your settings and collaboration choices.
• Calculate usage, maintain shared credit balances, administer subscriptions, process purchases, and handle billing questions.
• Respond to support and privacy requests and send necessary service, security, and account communications.
• Maintain, secure, troubleshoot, and measure the performance and reliability of the Services, subject to the stricter Chrome extension limits below.
• Prevent fraud and abuse, enforce applicable terms, and comply with legal obligations.

Where applicable data-protection law requires a legal basis, we rely on performance of our agreement with you, compliance with legal obligations, legitimate interests such as service security and reliability subject to your rights, or consent where required. We obtain separate consent for processing that legally requires it. We do not treat this privacy policy itself as blanket consent.

6. Service providers and other recipients

We disclose information necessary for the requested feature or related operations to the following providers:

• Base44: hosting, authentication, application infrastructure, and backend processing: account/authentication data, prompts, results, usage, and related technical information needed to operate SwoopChat. Privacy information
• Grok / xAI-branded AI services: AI processing: prompts, instructions, context, and related content required for the requested generation. Privacy information
• OpenAI / ChatGPT: website AI processing: content needed for the website models and features that use OpenAI. Privacy information
• Google / Gemini: website AI processing: content needed for the website models and features that use Gemini. Privacy information
• Anthropic / Claude: website AI processing: content needed for the website models and features that use Claude. Privacy information
• Stripe: payments and subscriptions: payment, billing, transaction, and technical information necessary for payment services. Privacy information
• Wistia: embedded website video: connection/device information and video interaction information associated with loading and playing the embedded video. Privacy information

Provider privacy pages are informational references. The API, business-service, processing, and contractual terms applicable to our configured services may differ from a provider's consumer-product terms. We remain responsible for ensuring our provider arrangements are compatible with our commitments and applicable requirements; linking to a provider's policy does not replace our own disclosures.

We may also disclose information when required by applicable law, a valid legal process, or necessary action to protect security and prevent fraud or abuse, subject to applicable restrictions. Any business-transfer disclosure of Chrome extension data requires explicit prior user consent as described below; a general acquisition clause does not override that requirement.

7. Chrome Web Store Limited Use commitments

SwoopChat's collection, use, and transfer of user data obtained through the Chrome extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

For data obtained through the extension, including raw content and data aggregated, anonymized, de-identified, or derived from it:

• We limit collection, use, and transmission to the extension's disclosed single purpose, including necessary operational purposes such as maintaining, securing, and measuring the reliability of that functionality.
• We do not collect or use browsing activity except as necessary for a prominently disclosed, user-facing extension feature.
• We do not sell extension data, provide it to data brokers or advertising platforms, use it for personalized advertising, or use it to determine creditworthiness or for lending.
• We transfer extension data only as necessary to provide or improve the disclosed single purpose, comply with law, protect against malware, spam, phishing, fraud, or abuse, or carry out a merger, acquisition, or asset sale after obtaining explicit prior user consent.
• Humans may read extension user data only with your explicit consent to access specific data, when it is aggregated and anonymized for lawful internal operations, when necessary for security purposes, or when required by law.
• Other uses and transfers are prohibited. General website uses do not expand these permissions for data obtained through the extension.

We require any applicable prominent disclosure and affirmative consent within the product before the relevant data handling. A policy link or store description alone does not substitute for that consent.

8. AI training, cookies, and embedded content

AI training. We do not use Chrome extension prompts, outputs, or browsing information to train general-purpose AI models, and do not authorize providers to use that data for general-purpose training unrelated to the extension's disclosed single purpose. We require compatible provider settings and terms. We do not use website prompts or outputs to train our own general-purpose AI models. Any separate, optional model-improvement program would require a specific explanation and any required consent before participation, and would not permit uses prohibited for extension data.

Cookies and browser storage. Website functionality may use cookies or similar storage for authentication, sessions, security, and settings. The extension uses Chrome local extension storage rather than treating third-party website cookies as its account session. Browser controls let you manage website cookies; blocking them may affect sign-in and other features.

Embedded video. Our website includes a Wistia video. Loading embedded content may disclose connection and device information to Wistia and its infrastructure and may involve cookies or playback statistics. Where required, nonessential storage or tracking must remain disabled until you consent.

We do not use Chrome extension data for advertising or advertising profiling. Any additional website analytics, advertising, email-marketing, or session-recording services must be disclosed and configured with legally required choices before use. We do not treat this policy as authorization to add undisclosed tracking.

9. Storage and retention

Extension storage. Settings, pending selected text, a session token, cached credit information, and saved prompt history are stored in your local Chrome profile. The session token is restricted to trusted extension contexts; content scripts cannot read that storage. Saved history can include original prompts and generated text and is limited to the 50 most recent saved entries. You can disable automatic saving in Settings or remove saved entries using the history controls.

Signing out removes the extension account token, pending signup information, and cached balance. It does not clear saved prompt history. Clear History does not delete account records or data already sent to SwoopChat or an AI provider. Uninstalling normally removes the extension's local storage from that browser profile; browser/device backups and managed profiles may behave differently.

Server-side information. We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by applicable law. Retention depends on the information type, account status, your deletion choices, support needs, security and fraud-prevention needs, contractual/provider requirements, and legal recordkeeping obligations.

Account content retained for your use is subject to available deletion controls and verified requests. Billing and transaction records may be retained for tax, accounting, dispute, or legal requirements. Security logs and backup copies may persist for limited operational periods; when retained after a deletion request, they must be protected, restricted from ordinary use, and removed or de-identified when the relevant retention need ends.

Provider processing and retention must remain consistent with our obligations, including the extension's Limited Use restrictions. Local history deletion alone does not instruct providers to delete their server records.

10. Your choices and privacy rights

You can choose whether to submit a prompt, use website features, save local history, copy or insert a result, permit extension site access, or uninstall the extension. Stopping generation prevents new requests but does not undo processing already completed.

Depending on your location and applicable law, you may have rights to request access, correction, deletion, a portable copy, restriction of processing, objection to certain processing, withdrawal of consent, or an appeal of a request decision. You may also have rights concerning sale, advertising-related sharing, targeted advertising, or other regulated processing where applicable. Our Chrome extension data is not sold or used for those advertising purposes.

Email hello@swoopchat.ai to exercise a right. We may request proportionate information to verify your identity and, for an authorized agent, their authority. We respond within legally required time limits and explain applicable exceptions or inability to fulfill a request. We do not unlawfully discriminate against you for exercising privacy rights.

Where applicable law requires it, we honor valid opt-out preference signals, such as Global Privacy Control, for covered website processing. You may also contact the relevant data-protection authority. Withdrawing consent does not affect the lawfulness of processing before withdrawal or processing that law permits on another basis.

Deleting an account is separate from canceling a paid subscription. To avoid unintended renewal, also use the applicable subscription-management process or request billing assistance. Do not assume local history clearing, signing out, or uninstalling cancels a subscription.

11. Security and international processing

We use appropriate technical and organizational measures intended to protect personal information, including encrypted HTTPS transmission for the extension's account and generation requests, restricted access, and safeguards appropriate to the information and risk. No service or transmission method is completely secure. Local extension storage should not be treated as an encrypted vault; protect your browser profile and device.

SwoopChat is based in the United States. Our providers may process information in the United States and other countries. Where legally required for a transfer, we use appropriate legal safeguards, such as applicable contractual protections. We do not represent that all information stays in one country or that every provider has identical protections.

12. Children and teenagers

The Services are intended for users aged 13 and older, or any higher minimum age required by applicable law. They are not directed to children under 13. Users below the age of legal adulthood should use the Services with permission from a parent or guardian where required. A 13+ minimum does not override local rules requiring parental consent or a higher age for specific processing.

We do not knowingly collect personal information from children under 13. If we learn that such information was collected without the legally required authorization, we will take appropriate steps to stop the affected processing and delete the information as required by law. Parents or guardians can contact hello@swoopchat.ai about a child's information.

13. Changes to this policy

We may update this policy to reflect changes in the Services, providers, practices, or law. We will publish the updated policy with a new effective date and provide additional notice or obtain fresh consent where required for material changes. We will not treat a policy update as retroactive permission for previously undisclosed uses of extension data.

14. Contact

Swoop Insights LLC dba SwoopChat

Wyoming, United States

Privacy, data access, correction, and deletion: hello@swoopchat.ai

Website: https://swoopchat.ai