Privacy Policy

Overview

Swellworks LLC ("Swellworks", "we", "us") builds and hosts operational software for organizations: scheduling and room booking, approvals and request workflows, support desks, surveys, and related tools. This policy explains what information we collect when you use our website at swellworks.io or any Swellworks product (together, the "Services"), how we use it, and the choices you have.

The short version: we collect what we need to run the Services for you and your organization, we do not sell your information, and we do not use it for advertising.

Who is responsible for your data

Most people use a Swellworks product because their organization (a church, school, nonprofit, or business) has chosen it. In that case your organization is the customer and decides how the product is configured, who has access, and how long records are kept. Swellworks processes your information on that organization's behalf and under its instructions. Questions about how your organization uses the product should go to your organization's administrator first.

When you visit swellworks.io, fill out our contact form, or correspond with us directly, Swellworks is responsible for that information itself.

What we collect

Information you give us

Account details. Your name, email address, and profile photo when you create an account or sign in, plus the organization and role your administrator assigns you.
Content you enter. Requests, bookings, approvals, tickets, survey answers, notes, and files you submit through a product. This content belongs to you and your organization.
Messages to us. Anything you send through our contact form, a support request, or email.

Information collected automatically

Usage and device data. Pages viewed, actions taken, timestamps, browser type, operating system, and approximate location derived from your IP address.
Activity logs. Products keep a record of who created, changed, approved, or deleted a record so administrators can audit what happened.
Cookies and similar technologies. We use strictly necessary cookies to keep you signed in and protect against abuse. We do not use advertising or cross-site tracking cookies.

Signing in with Google

Swellworks products let you sign in with a Google account. When you do, Google shares your name, email address, and profile picture with us so we can create and identify your account. We request only the basic sign-in scopes needed for that purpose.

We do not read your Gmail, Calendar, Drive, or contacts unless a specific product asks you for that permission separately, explains why, and you grant it. Any information we receive from Google APIs is used only to provide or improve the feature you enabled and is never used for advertising, sold, or transferred to third parties except as needed to provide that feature, to comply with the law, or as part of a merger or acquisition.

Swellworks' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Swellworks' access at any time from your Google Account security settings under "Third-party apps with account access."

How we use information

To provide, operate, secure, and support the Services.
To send transactional messages such as booking confirmations, approval decisions, ticket replies, sign-in links, and service notices. These are part of the Services and are not marketing.
To respond when you contact us.
To understand how the Services are used so we can fix problems and improve them, using aggregated or de-identified data wherever possible.
To detect, prevent, and investigate abuse, fraud, or security incidents.
To comply with legal obligations.

We do not sell personal information, and we do not use it to serve ads.

We share information only in these situations:

With your organization. Administrators of the organization that gave you access can see your account details, the content you enter, and activity logs, according to the roles they configure.
With service providers. We rely on carefully chosen infrastructure providers in the United States for hosting, databases, authentication, and email delivery. They process data only on our instructions and under contracts that protect it.
For legal reasons. If required by law, subpoena, or court order, or to protect the rights, safety, or property of Swellworks, our customers, or the public.
In a business transfer. If Swellworks is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will give notice before your information becomes subject to a different privacy policy.

How long we keep information

We keep your information for as long as your account or your organization's subscription is active, and afterwards for as long as needed to meet legal, accounting, or security obligations. Organizations control the retention of the records they create in a product and can delete them at any time. When an organization ends its subscription, we delete or de-identify its data within 90 days unless the organization asks us to keep it or the law requires otherwise.

Security

We protect information with encryption in transit and at rest, role-based access controls, audit logging, and regular review of who has access to production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take it seriously and will notify affected customers without undue delay if a breach affects their data.

Your choices and rights

Access and correction. You can view and update most of your account details inside the product. For anything else, ask your organization's administrator or contact us.
Deletion. You can ask your organization to remove your account, or contact us directly. Some records may be retained where the law or your organization's own obligations require it.
Google access. Revoke Swellworks' access from your Google Account at any time.
Email. Transactional emails are part of the Services. If we ever send marketing email, every message will include an unsubscribe link.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to know what we hold about you, to request deletion, and to not be discriminated against for exercising those rights. We honor these requests regardless of where you live. To make a request, email us at the address below. We may need to verify your identity first.

Children

Swellworks products are built for organizations and their staff, volunteers, and members. Some customers, such as schools and youth ministries, may use a product to manage activities that involve minors. In those cases the organization is responsible for obtaining any consent required by law, and we process the information only on the organization's behalf. We do not knowingly collect personal information directly from children under 13 through swellworks.io. If you believe a child has provided us information directly, contact us and we will delete it.

Where data is stored

Swellworks is based in the United States and stores and processes information there. If you use the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Changes to this policy

We may update this policy as the Services or the law change. When we do, we will post the new version here and update the effective date at the top. If a change materially affects how we handle your information, we will notify customer administrators by email or inside the product before it takes effect.

Contact us

Questions, requests, or concerns about privacy can be sent to inquiries@swellworks.io. Product support is available at support@swellworks.io.

Swellworks LLC, California, United States.