Privacy Policy

This Privacy Policy explains how Tyla Marie Booker and Marlon Ray Swazy Jr., doing business as Swazy ("Swazy," "we," "us," or "our"), collect, use, disclose, retain, and protect personal information when individuals use swazyy.com, creator accounts, public storefronts, hosted products, buyer access areas, AI-assisted features, payment-related features, support channels, and related services that link to this Policy (collectively, the "Service").

This Policy applies to Creators, Buyers, visitors, trial users, and people who communicate with Swazy. It does not govern the independent privacy practices of Creators, Stripe, external websites, or other third parties. If you do not agree with this Policy, do not provide personal information or use the Service.

Swazy is initially designed for a United States launch. If we materially expand our geographic offering, products, data uses, or legal obligations, we will update this Policy and implement additional notices or consent mechanisms as required.

Swazy determines how personal information is processed for account administration, subscriptions, platform security, AI features, analytics, legal compliance, and operation of the Service. For information a Creator collects from Buyers through a storefront, the Creator and Swazy may each have separate responsibilities depending on context and applicable law.

Creators independently determine their product content, customer relationships, marketing practices, refund policies, and any additional Buyer information they request. Each Creator must provide any privacy notice legally required for the Creator's own activities and may use Buyer information only for lawful, disclosed purposes.

A Buyer should contact the applicable Creator about the Creator's independent use of Buyer information. A Buyer may contact Swazy about Swazy's platform-level processing, account access, security, or privacy rights.

The personal information Swazy collects depends on whether you are a Creator, Buyer, visitor, or applicant for a particular feature. The table summarizes the principal categories.

Creators can sign up and log in with email and password or with Google. When you use Google, Google shares your name, email address and profile photo with Swazy; we use them to create and sign in to your account, and your Google photo becomes your starting profile photo, which you can change. Swazy never receives your Google password and doesn't access your Google contacts, files or other data. Sign-in is handled through our hosting provider's authentication service.

Swazy generally does not store complete payment-card numbers or online-banking credentials. Those details are collected directly by Stripe or another authorized Payment Processor. Swazy may receive a transaction identifier, card brand and last four digits, billing country, connected-account status, payout status, risk signals, and other information needed to operate payment features.

Some content may contain personal information about other people. You may submit such information only when you have a lawful basis and any required permission. Do not upload government identifiers, full payment credentials, passwords, protected health information, or highly sensitive information unless Swazy specifically requests it through a secure workflow.

We collect information directly from you when you register, connect Stripe, create products, submit prompts, upload files, configure a storefront, buy a product, request support, complete a survey, or communicate with us.

We collect information automatically from browsers, devices, cookies, logs, security systems, and interactions with the Service. We may receive information from Creators, Stripe, identity and fraud providers, authentication providers, referral or affiliate partners, publicly available sources, and services you intentionally connect.

If a Creator imports or submits information about Buyers, collaborators, leads, or testimonial participants, the Creator represents that the collection and disclosure are lawful and consistent with the Creator's notices and permissions.

We use personal information to provide, maintain, personalize, and improve the Service; create and secure accounts; authenticate users; enable product creation, hosting, publishing, purchase, access, and delivery; administer subscriptions and AI Credits; and provide support.

We also use information to process or facilitate payments, application fees, refunds, disputes, and payouts; verify identities and connected-account status; detect fraud, abuse, account sharing, scraping, infringement, and prohibited products; enforce agreements; comply with law; and protect Swazy, users, and the public.

We analyze product and feature usage, performance, errors, conversion events, and aggregated commercial activity to understand whether the Service works, improve user experience, evaluate AI quality, develop templates and features, and make plan or product recommendations.

We communicate about transactions, trials, renewals, changes, security, support, products, and---where permitted---marketing. We may use information for another compatible purpose disclosed at collection or with consent.

When you use an AI-assisted feature, Swazy processes the prompt, selected account context, Creator Content, requested settings, prior refinement messages, and resulting output. This information may be transmitted through Lovable's AI Gateway and to underlying artificial-intelligence providers solely as needed to generate output, monitor performance, prevent abuse, and support the feature.

If you attach files to an AI request (for example notes, a PDF, a text file, or an image), Swazy stores them privately in your account's storage, and sends their content through Lovable's AI Gateway to the underlying AI provider only to generate that request's output. Attached files are never shown to Buyers or published. Voice typing in the AI composer uses your browser's built-in speech recognition, which may be processed by your browser or device maker under their own terms; Swazy receives only the resulting text.

If you choose to provide writing samples and phrase preferences for your voice profile, Swazy stores them with your account and uses them, together with the style profile derived from them, only to tailor AI Output to how you write. You can replace them in Settings at any time, and they are deleted with your account.

Your conversations with Swazy's AI (what you asked, which builds and page changes it made, and whether you kept or undid a change) are saved privately in your account so you can return to them on any device. To tailor its output, the AI also receives a short summary of your own workspace with each request: your products, prices and which are live, how your link-in-bio currently looks, and what you recently asked for, kept, or undid. Settings shows exactly what that summary contains. You can delete a single chat, or forget your whole chat history in Settings, at any time; chats are also deleted with your account. This information is never shown to Buyers.

AI prompts and outputs may be reviewed by automated systems and authorized personnel for troubleshooting, safety, quality evaluation, billing, or abuse prevention. We seek to use available contractual and technical controls that restrict third-party providers from training public general-purpose models on private Creator Content. Swazy does not intentionally authorize such training without separate disclosure and, where required, consent.

Swazy may use de-identified and aggregated signals---such as common product structures, edit patterns, generation success rates, conversion ranges, safety classifications, and feature performance---to improve templates, evaluations, recommendations, security, and AI-assisted experiences. We do not attempt to re-identify information that has been properly de-identified.

Do not submit confidential third-party data, protected health information, payment-card data, government identifiers, or information you lack authority to process. Creators are responsible for reviewing and correcting AI Output before publication.

Stripe processes Creator onboarding, identity and business verification, payment credentials, charges, connected accounts, payouts, refunds, disputes, fraud signals, and tax-related information under Stripe's own terms and privacy policy. Stripe may require personal information directly from Creators and may share status, transaction, risk, and account information with Swazy.

When a Buyer purchases a Creator Product, Stripe processes the payment directly on the Creator's connected account (a Stripe Connect direct charge), and Swazy receives its Platform Fee as an application fee. The Creator's statement descriptor ordinarily appears on the Buyer's card or bank statement. Swazy receives information needed to confirm payment, calculate Platform Fees, provide access, issue receipts, support refunds and disputes, and maintain records. Swazy does not control Stripe's independent legal obligations or retention.

When a Creator offers an after-purchase offer, Stripe saves the Buyer's payment method on that Creator's connected account (not with Swazy) so the Buyer can accept the offer with one tap shortly after paying. Swazy never sees the full card details and only triggers a charge when the Buyer taps to accept. Memberships and payment plans are Stripe subscriptions on the Creator's connected account: Stripe keeps the payment method there to charge each renewal or installment, and Swazy receives the subscription's status and dates to show the Buyer and Creator and to end access when a membership ends. Discount codes a Creator creates, and how often each is used, are stored with the Creator's account.

We may disclose transaction information to the relevant Creator, Buyer, Stripe, banks, card networks, fraud providers, tax authorities, regulators, or law enforcement as necessary to complete the transaction, prevent harm, resolve a dispute, or comply with law.

We may disclose personal information to service providers that perform hosting, databases, storage, authentication, AI processing, email, customer support, analytics, security, fraud prevention, identity verification, payments, accounting, legal, and other operational services. They may process information only for authorized purposes and subject to applicable contractual restrictions.

Swazy sends transactional emails through Resend, our email delivery provider, from swazyy.com: purchase receipts with a link to open what was bought, free sign-up confirmations, 1:1 call confirmations with a calendar invite, refund confirmations, and, to Creators, notices of new sales and bookings and a welcome message. Emails about a purchase show the Creator's name, and replies go to the Creator. The link in a purchase email is signed so it can restore the Buyer's access on any device. Swazy does not use these emails for its own marketing and does not track opens or clicks. When a Creator uses Swazy's email marketing tools, Swazy sends that Creator's emails to their contacts through Resend on the Creator's behalf, from swazyy.com with the Creator's name, with replies going to the Creator; each marketing email carries an unsubscribe link, and Swazy keeps a per-Creator list of people who unsubscribed so they are not emailed again. Swazy does not track opens or clicks in these emails either.

We disclose information to Creators and Buyers as necessary to complete transactions, provide purchased access, communicate, deliver support, process refunds, and resolve disputes. We may disclose information to a person or organization at your direction, such as an integration you connect.

We may disclose information when reasonably necessary to comply with law, legal process, sanctions, tax obligations, or governmental requests; enforce agreements; protect rights, property, safety, and security; investigate fraud or abuse; or establish, exercise, or defend legal claims.

We may disclose aggregated or de-identified information that does not reasonably identify an individual. We do not permit recipients to re-identify that information.

A Creator may receive a Buyer's name, email, purchase, product access status, communications, refund or dispute information, and other information necessary to fulfill the purchase and administer the customer relationship. The Creator may not receive the Buyer's complete payment-card number or banking credentials from Swazy.

Creators are independent recipients of Buyer information. Their use of that information is governed by their own privacy notices and applicable law. Swazy contractually restricts Creators from selling Buyer information, using it for unrelated purposes, sending unlawful marketing, or retaining it longer than necessary, but Swazy cannot guarantee every Creator's conduct.

Visitors who join a product waitlist, use a storefront's Subscribe button, or respond to a storefront email pop-up give their email address to that Creator. Swazy stores it on the Creator's behalf, shows it only to that Creator, and lets the Creator export it or email these people with Swazy's email tools; Swazy never uses these lists for its own marketing. Buyers and challenge participants may also receive a Creator's marketing emails, and anyone can unsubscribe from a Creator with the link in any of that Creator's emails. A visitor who wants to be removed may ask the Creator or contact privacy@swazyy.com.

Buyers should avoid submitting sensitive information directly to a Creator unless necessary and should review the Creator's disclosures. Suspected misuse may be reported to privacy@swazyy.com.

Swazy does not sell personal information for money. We may use analytics, attribution, referral, or advertising technologies to understand traffic and promote Swazy. Some state laws may define certain transfers for cross-context behavioral advertising as "sharing" or a "sale" even when no money changes hands.

Before Swazy activates non-essential advertising technologies that require a choice, we will provide an appropriate cookie or privacy control. Where legally required, Swazy will honor a valid opt-out preference signal such as Global Privacy Control for the browser or device that sends it.

A "Your Privacy Choices" link or comparable control will be made available if Swazy engages in processing that requires such a link. Disabling advertising cookies does not prevent essential, security, or transaction cookies and does not eliminate advertisements that are not based on cross-site activity.

Cookies and similar technologies help Swazy keep users signed in, remember settings, maintain carts or checkout state, prevent fraud, measure performance, diagnose errors, attribute referrals, and understand usage. These technologies may include cookies, local storage, pixels, software development kits, and server-side event records.

Interactive tools inside a Creator Product, such as worksheets, checklists and trackers, save what a Buyer enters in that Buyer's own browser storage on their device. Swazy does not receive those entries, and clearing the browser's site data removes them.

Today Swazy uses only essential technologies — for authentication, security, remembering what a Buyer bought in their browser, the payment flow and preferences. We don't use advertising cookies, cross-site tracking or third-party analytics. The full list, with each item's purpose and duration, is in our Cookie Policy at https://swazyy.com/cookies. If we ever add analytics or advertising technologies, we'll update that page and ask for consent first where the law requires it.

You can adjust browser controls and any Swazy privacy settings. Blocking essential cookies may prevent the Service from working. Cookie duration ranges from a single session to the period reasonably necessary for the described purpose.

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including account operation, Buyer access, transactions, disputes, safety, fraud prevention, backups, legal compliance, and enforcement.

Account and Creator Content are generally retained while the account is active and for a limited period after closure to permit recovery, resolve disputes, or satisfy legal obligations. Transaction, tax, payout, refund, and dispute records may be retained for seven years or another legally appropriate period. Security logs may be retained as needed to detect and investigate abuse. AI request logs and support records are retained for operational, quality, safety, and legal needs and may also be subject to provider retention schedules.

Deletion from active systems may not immediately remove information from encrypted backups. Backup information is isolated from ordinary use and deleted or overwritten according to backup cycles. We may retain information longer when litigation, investigation, legal hold, unpaid balance, abuse, or another lawful need exists.

De-identified information may be retained without the same time limits provided we maintain it in de-identified form and do not attempt to re-identify it.

Swazy uses administrative, technical, and organizational safeguards intended to protect personal information, including access controls, authentication, encrypted network transmission, provider security controls, logging, backups, and role-based access where appropriate.

No system, transmission, model provider, or storage method is completely secure. Swazy cannot guarantee absolute security. Users must protect credentials, enable available multifactor authentication, use unique passwords, restrict team access, and promptly report suspected incidents to security@swazyy.com.

If a security incident affects personal information, Swazy will investigate and provide notices required by applicable law. We may require identity verification before discussing an account or releasing information.

You may update many profile, storefront, communication, and billing settings through your account. Creators have Data controls in Settings: turn off AI memory (the AI then uses none of your workspace or past chats), delete all AI chats, turn off sale and booking alert emails, export everything Swazy holds for your account as a file, clear preferences saved on a device, and delete your account. You may unsubscribe from marketing emails using the link in the message. Transactional, security, billing, product-access, and legal messages may continue while necessary.

Creators may request export or deletion of eligible account data. Deletion may be limited when information is needed for Buyer access, transactions, legal obligations, disputes, fraud prevention, security, backups, or legal claims. Closing an account does not cancel obligations owed to Buyers or Swazy.

You may control non-essential cookies using available tools and may disconnect integrations through settings or the relevant third party. Disconnecting a service may not delete information already lawfully received.

Depending on your state and whether an applicable law covers Swazy, you may have rights to confirm processing; access, correct, or delete personal information; obtain a portable copy; opt out of sale, targeted advertising, sharing, or certain profiling; restrict or withdraw consent; and appeal a denied request.

Submit a request to privacy@swazyy.com or through the privacy request method made available on swazyy.com. State your name, account email, state of residence, requested right, and enough information for us to locate the relevant records. We will verify the request proportionately and may ask for additional information. We will not discriminate against you for exercising a privacy right.

An authorized agent may submit a request where permitted, but we may require proof of authorization and direct identity confirmation. If we deny a request, we will explain the basis where required and provide appeal instructions. Rights are subject to legal exceptions, including transaction completion, security, fraud prevention, legal compliance, free speech, and legal claims.

For California residents, the categories collected during the preceding 12 months may include identifiers; customer records; commercial information; internet or electronic-network activity; approximate geolocation; audio, visual, and other uploaded content; professional or employment-related information a Creator provides; inferences; and sensitive personal information such as account login credentials or identity information processed for verification.

We collect these categories from users, devices, Creators, Stripe, connected services, fraud and identity providers, and public sources. We use and disclose them for the business and commercial purposes described in this Policy. Recipient categories include Creators and Buyers involved in a transaction; infrastructure, AI, payment, security, analytics, communications, professional, and support providers; connected services; legal authorities; and parties to a business transaction.

Swazy does not sell personal information for money. If Swazy uses advertising or analytics practices that qualify as a sale or sharing under California law, California residents may opt out through the privacy controls described above. Swazy does not use sensitive personal information to infer characteristics or for purposes requiring a right to limit beyond what is reasonably necessary to provide and secure the Service.

California residents may request access to categories and specific pieces, deletion, correction, and information about disclosure, and may opt out of sale or sharing where applicable. Swazy does not knowingly sell or share the personal information of consumers under 16. Swazy does not offer financial incentives in exchange for personal information unless separately disclosed under applicable law.

Creator accounts are limited to adults. The Service is not directed to children under 13, and Swazy does not knowingly collect personal information directly from a child under 13 without legally required parental consent.

If we learn that a child under 13 provided personal information in violation of this Policy, we will take reasonable steps to delete it. A parent or guardian may contact privacy@swazyy.com. Creators may not use Swazy to collect personal information from children in a manner that violates the Children's Online Privacy Protection Act or other child-privacy law.

A minor Buyer should use Swazy only with parent or guardian involvement. Products intended for minors may be restricted or require additional review and safeguards.

Swazy is not designed to receive protected health information on behalf of HIPAA-covered entities, biometric identifiers, precise geolocation, complete financial credentials, Social Security numbers, or other highly sensitive information except through an expressly designated secure and lawful workflow.

Do not place sensitive information in AI prompts, public storefronts, product testimonials, or ordinary support messages. Creators offering health, finance, legal, or similar educational content must avoid collecting unnecessary sensitive Buyer information and must establish their own lawful safeguards.

Where Swazy must process sensitive information for identity verification, account security, payments, or legal compliance, we limit the use to those purposes and to other purposes permitted by law.

Swazy uses automated systems to generate content, recommend structures, detect fraud or abuse, prioritize review, analyze product and feature performance, and protect accounts. AI-generated suggestions do not independently make decisions producing legal or similarly significant effects concerning employment, housing, credit, education, insurance, or health care.

Stripe and security providers may use automated tools for identity verification, payment authorization, fraud detection, risk assessment, and account eligibility under their own policies. A user may contact Swazy about an account restriction, although Swazy cannot override decisions controlled by an independent provider.

Swazy is based in the United States, and personal information may be processed and stored in the United States and other locations where service providers operate. Those locations may have privacy laws different from those in your jurisdiction.

Swazy's creator service is not currently directed to residents of jurisdictions requiring localization, representative appointments, or transfer mechanisms that Swazy has not implemented. If Swazy expands internationally, we will add legally required transfer safeguards, notices, and rights before intentionally targeting those markets.

Public storefronts and Creator Products may contain links, embeds, files, or integrations controlled by Creators or other third parties. Their privacy and security practices are governed by their own policies. Swazy is not responsible for information you provide directly to them.

Key provider categories include payment and identity services such as Stripe; application, hosting, database, and AI infrastructure such as Lovable and its underlying providers; communications and email providers; analytics and error-monitoring tools; customer-support tools; and professional advisers. The specific provider set may change as the Service develops.

When you intentionally connect a third-party account, you direct us to exchange the information necessary for that integration. Review the third party's permissions and disconnect access when no longer needed.

If Swazy is involved in a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or transfer of the Service, personal information may be reviewed or transferred as part of that transaction, subject to appropriate confidentiality and applicable law. We will provide notice if required before information becomes subject to a materially different privacy policy.

We may preserve and disclose information in response to subpoenas, court orders, warrants, regulatory requests, tax obligations, sanctions, or other lawful process. Where legally permitted and appropriate, we may notify the affected person. We may reject requests that are facially invalid, overbroad, or unlawful.

We may update this Policy to reflect changes in products, providers, data practices, or law. The Effective date will identify the current version. For material changes, we will provide reasonable notice through email or the Service when required.

If a change requires consent, we will request it. Continued use after a non-consent-based update takes effect means the updated Policy applies to future use. Earlier processing remains governed by the law and disclosures applicable when it occurred.

Privacy questions and requests may be sent to privacy@swazyy.com. Security reports may be sent to security@swazyy.com. Legal notices may be sent to legal@swazyy.com.

Swazy is operated by Tyla Marie Booker and Marlon Ray Swazy Jr., doing business as Swazy, in Florida, United States. Before publishing this Policy, Swazy should ensure that each listed email address and any website privacy-request form are active and monitored.