Privacy Policy

Last updated: April 14, 2026

1. Information We Collect

When you use Swan, we collect the following categories of information:

  • Account information: Email address and authentication credentials when you create a Swan account.
  • Connected platform data: When you connect a social media account (e.g., TikTok), we receive your display name, username, avatar, bio, and profile URL through the platform's API. We also receive OAuth tokens to act on your behalf.
  • Content you create: Post titles, descriptions, images, and publishing preferences you provide when creating posts through Swan.
  • Usage data: Basic analytics about how you interact with the app, including pages visited and features used.

2. Children's Privacy (COPPA / UK GDPR)

Swan is not intended for children under the age of 13. We do not knowingly collect data from children. If we discover that such data has been collected, it will be deleted immediately.

3. How We Use Your Information

  • To authenticate you and maintain your session.
  • To connect to third-party platforms (TikTok, Instagram, YouTube, X) and publish content on your behalf using their APIs.
  • To display your connected account profiles and post history.
  • To optimize and resize images for platform-specific requirements.
  • To improve the Swan product and fix bugs.

4. Third-Party Platform APIs

Swan integrates with TikTok and other social platforms through their official APIs. When you connect an account, you grant Swan permission to access specific scopes (e.g., user.info.basic, video.publish). We only request the permissions necessary to provide our services.

Your content is transmitted directly to the platform's servers for publishing. Swan may temporarily host media URLs (for example on Cloudflare R2) so platforms can pull assets for publishing. How long we keep each category of data is described in Section 5 (Data retention).

5. Data retention

  • Account and authentication data: Retained until you delete your Swan account or we delete it in accordance with these terms.
  • OAuth tokens and connected accounts: Retained until you disconnect the platform in Swan or delete your Swan account.
  • Post records in your dashboard: Titles, descriptions, and publishing preferences you enter in Swan are retained until you delete the post, disconnect the account, or delete your Swan account.
  • Video metadata (posting history): We retain video metadata (for example publish identifiers and status information used to provide posting history) for 30 days, after which it is anonymized or deleted, unless you request deletion sooner or applicable law requires a different schedule.
  • Temporary media URLs (e.g. R2): Files and URLs used only so a platform can pull media for publishing are kept for a short operational window (typically days, not as a permanent archive) and are removed or overwritten as part of normal operations.

6. Data Storage and Security

Your data is stored securely using Supabase (for authentication and metadata) and Cloudflare R2 (for temporary image storage). We use industry-standard encryption in transit (TLS) and at rest. OAuth tokens are stored securely and never exposed to the client.

7. Data Sharing

We do not sell your personal information. We share data only with:

  • Third-party platforms you explicitly connect (TikTok, Instagram, YouTube, X) to publish content.
  • Infrastructure providers (Supabase, Cloudflare, Google Cloud) that host our services under strict data processing agreements.

8. Your Rights

You may at any time:

  • Disconnect any linked social media account.
  • Request deletion of your Swan account and all associated data.
  • Revoke Swan's access to a platform through that platform's settings (e.g., TikTok > Settings > Manage permissions).

9. Cookies

Swan uses essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at admin@digipuja.app.