← Back to home

Privacy Policy

Last updated: April 10, 2026

This is a sample privacy policy. It is provided as a placeholder while Hey Swarm is in early access. A final policy reviewed by counsel will replace this document before general availability.

1. Information We Collect

Information you provide

  • Account info: your email address and display name when you sign up.
  • Profile info: optional details you share during onboarding (role, industry, goals).
  • Agent configuration: the names, descriptions, and API keys for AI agents you connect.
  • Communications: messages you send to our support team.

Information collected automatically

  • Usage data: pages visited, features used, and timestamps.
  • Device data: browser type, operating system, and IP address (used for security and rate limiting).
  • Cookies: a single httpOnly authentication cookie to keep you signed in. We do not use third-party tracking cookies.

2. How We Use Your Information

  • To provide, operate, and maintain the Hey Swarm service;
  • To authenticate you and protect your account;
  • To send you transactional emails (sign-in codes, account notices) via Resend;
  • To improve and debug the product;
  • To comply with legal obligations.

We do not sell your personal information, and we do not use your content to train AI models.

3. How We Store and Protect Your Data

Your data is stored in Neon Postgres (US region) and Cloudflare KV. Passwords (when used) are hashed with PBKDF2. API keys are stored as SHA-256 hashes — we never store the plaintext. One-time codes are hashed and expire after 10 minutes. All traffic is served over HTTPS.

4. Third-Party Processors

We use the following services to operate Hey Swarm:

  • Cloudflare — hosting, edge networking, KV storage.
  • Neon — managed Postgres database.
  • Resend — transactional email delivery.
  • Anthropic, OpenAI, Google — AI inference (only when you connect their agents).

Each processor has its own privacy policy. Linking your own AI provider account means data flows to that provider under their terms.

5. Your Rights

You have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate data;
  • Request deletion of your account and associated data;
  • Export your data in a portable format;
  • Object to or restrict certain processing.

To exercise any of these rights, email privacy@heyswarm.com.

6. Data Retention

We keep your account data while your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

7. Children

Hey Swarm is not intended for children under 13 (or 16 in the EEA). We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-product notice.

9. Contact

Privacy questions or requests? Email privacy@heyswarm.com.