Privacy Policy

• Account identity — your email address or phone number (used for sign-in), and your name and profile picture if you sign in with Google.
• Decision content — the decisions you create, the answers you give, your stances and notes, and your chats with the system.
• Usage and model logs — records of the AI calls made for your sessions (prompts, responses, token counts) and basic technical data needed to run the service.
• Visits and pages viewed — we keep our own first-party record of visits to our site: the page you arrived on, the pages you opened, roughly how long each page was open in front of you, the site or ad that referred you, and the country our content network reports for the request. We record a general device type (phone, tablet or computer) and browser family, not the detailed browser fingerprint your device sends. We do notstore your IP address in these records, and we don't know anything narrower than your country. This is measured by us, for us — there is no third-party analytics service, no advertising network tag, and none of it leaves our own database.
• Technical data and cookies — standard log data your browser sends (like IP address and browser type), and a small set of cookies we need to run the product: your sign-in session, a device identifier, and a record that you checked the consent box. The device identifier is the same first-party cookie used above, which is what lets a visit and the session it turns into be counted as one person rather than two. We don't use advertising or cross-site tracking cookies.

• To operate the product — generating your sections, items, and paths.
• To improve the product during the private beta: we can and likely will review sessions, as spelled out in the Terms of Service, which you accept with the same checkbox.
• To sign you in and keep your account secure.
• To understand how people find and use the site — how many arrive, what they read, and what helps them get started.

We do not sell your data, and we don't use it for third-party advertising.

Running Swizzl means some of your data passes through the services we build on:

• Anthropic — the AI models that generate your decision content receive the relevant parts of your session.
• Twilio — sends and checks the one-time sign-in codes (sees your email or phone number).
• Google — if you sign in with Google.
• Cloudflare and Neon — our hosting and database infrastructure, where your data is stored.
• SerpApi — when the product runs web searches to ground recommendations, the search queries (derived from your decision) are sent to it.

Beyond the providers above, we would disclose personal data only: if the law requires it (for example a valid legal request); if it's needed to protect the safety, rights, or property of our users, the public, or Swizzl; or, if Swizzl is ever acquired or reorganized, to the parties in that transaction — in which case this policy's protections follow the data.

Our infrastructure providers may store and process data in the United States and other locations where they operate.

We keep your account and decision content while your account is active, so you can return to your workspaces. Model-call logs are kept for debugging and product improvement during the beta. When the beta ends, data may be deleted (see the Terms). To have your account and data deleted sooner, email us.

Email us and we'll do it: you can ask to see the personal data we hold about you, get a copy of it, correct something that's wrong, or delete your account and data entirely.

We take reasonable technical and organizational measures to protect your data. That said, no internet service can promise perfect security, so think before putting anything into Swizzl that you couldn't bear to have exposed.

Swizzl is not directed at children. You must be 18 or older to use it, and we don't knowingly collect data from anyone younger. If you believe a minor has an account, email us and we'll delete it.

When you check the consent box at sign-in we record the time and the version of the terms you accepted. If the terms or this policy change materially, the version is bumped and you'll be asked to accept again before continuing.

Questions, or a data-deletion request: andrew@swizzl.ai.