Privacy Policy

Effective date: 2026-05-11

1. Our Commitment to You

Swiftly Studio (the “Service”, “we”, “us”, “our”) respects your privacy. This Privacy Policy describes the personal information we collect about you, how we use it, who we share it with, and the rights you have over it.

This policy applies to use of the Service at swiftlystudio.com and related domains. It does not apply to third-party services we link to.

2. Grounds for Data Collection

We collect personal information only when we have a lawful basis under applicable privacy law. Under the GDPR and UK GDPR, our lawful bases are:

  • Performance of a contract — to provide the Service and bill you for it under our Terms of Service.
  • Consent — for optional features such as marketing emails or precision analytics cookies. You may withdraw consent at any time.
  • Legitimate interests — to keep the Service secure, prevent fraud and abuse, debug issues, and improve our product and safety systems, provided those interests are not overridden by your rights.
  • Legal obligation — to comply with tax, accounting, and law-enforcement obligations.

3. Personal Information We Collect

3.1 Information You Provide

CategoryExamples
Account informationName, email, password (stored hashed), identifiers from third-party sign-in providers you use
Billing informationBilling name, address, tax identifiers, last four digits of card. Full card numbers are handled by our payment processor and never reach our servers.
Generation inputsPrompts you write, reference media you upload (images, audio, video clips), parameters you choose
Generated outputsImages, videos, voiceovers, and music your account has generated
Support communicationsMessages you send us via email or in-app support

3.2 Information Collected Automatically

CategoryExamples
Usage dataPages viewed, features used, number and type of generations, timestamps, session length
Device dataIP address, browser type and version, OS, device identifiers, language
Cookies and similarSession cookies for sign-in, preference cookies, analytics cookies (with consent where required)

We do not knowingly collect special-category data (race, religion, biometric data, health data) except where you choose to submit it as generation input — in which case you warrant under our Terms that you have the necessary rights and consents.

4. How We Use Your Information

PurposeLawful Basis (GDPR)
Provide, operate, and deliver the ServicePerformance of a contract
Process payments and manage subscriptionsPerformance of a contract
Route generation requests to AI providersPerformance of a contract
Send transactional emails (receipts, password resets, security notices)Performance of a contract
Detect and prevent fraud, abuse, and violationsLegitimate interest in protecting the Service
Improve safety systems and product features (using aggregated, de-identified data)Legitimate interest
Send marketing communicationsConsent (you can opt out anytime)
Comply with legal and tax obligationsLegal obligation

We do not use your prompts, uploads, or outputs to train Swiftly’s own models. Third-party AI providers that fulfil generation requests process your inputs under their own terms and privacy policies; please review them.

5. Tracking Technologies and Cookies

We use first-party and third-party cookies and similar technologies for:

  • Strictly necessary — sign-in, session management, security. Cannot be disabled.
  • Functional — language and theme preferences.
  • Analytics — understanding feature usage. Loaded only after consent in jurisdictions that require it.
  • Marketing — measuring advertising effectiveness. Loaded only with consent.

Where available, you can manage cookie preferences through our consent controls and at the browser level. Disabling strictly-necessary cookies may break parts of the Service.

6. How We Share Your Information

We share information with the following categories of recipients under appropriate contractual protections, and only as needed for the purposes in §4:

RecipientWhy
AI providersYour generation prompts and inputs are forwarded so the provider can produce the output.
Payment processorBilling details for processing payments and managing subscriptions.
Infrastructure and operational providersHosting, storage, database, email, analytics, and error monitoring providers that support the Service.
Professional advisorsLawyers, accountants, auditors under duty of confidentiality.
Government / law enforcementWhen required by law, subpoena, or to protect rights, life, or property.
SuccessorsIn connection with a merger, acquisition, or sale of assets, subject to the same privacy commitments.

We do not sell your personal information for money. For California residents, see §11 for what “sale” and “sharing” can mean under the CCPA.

7. Transfer of Data Outside the EEA / UK

Our servers and some of our service providers are located in the United States. When we transfer personal data of EEA, UK, or Swiss data subjects to a country that has not received an adequacy decision, we rely on lawful transfer mechanisms as available, which may include Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent. You may request information about the mechanisms in place by emailing privacy@swiftlystudio.com.

8. How We Protect Your Information

We apply administrative, technical, and physical safeguards we consider appropriate to the nature of the information we hold. No system is perfectly secure and we cannot guarantee absolute security. In the event of a personal data breach we will notify regulators and affected individuals where and when required by applicable law.

9. Data Retention

We retain personal information for as long as is necessary to provide the Service, to comply with legal and regulatory obligations (including tax and accounting), to resolve disputes, and to enforce our agreements. Generated assets are retained in your library until you delete them or your account is closed; backup copies may persist for a limited period thereafter. We may retain anonymised or aggregated data indefinitely.

10. Your Rights

10.1 European Union, UK, and Swiss Users

Under GDPR and equivalent laws you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”) in certain circumstances.
  • Restrict processing in certain circumstances.
  • Object to processing based on legitimate interests.
  • Data portability — receive data in a structured, machine-readable format.
  • Withdraw consent for any processing based on consent, without affecting prior processing.
  • Lodge a complaint with your local supervisory authority. You can find your authority at edpb.europa.eu.

To exercise these rights, email privacy@swiftlystudio.com. We respond within the timeframes required by applicable law.

10.2 California Residents

See §11 for California-specific rights.

10.3 Other Jurisdictions

If you reside in a jurisdiction with its own privacy law (e.g. Canada PIPEDA, Brazil LGPD, Australia Privacy Act, Japan APPI), you may have similar rights. Contact us to exercise them.

11. Additional Information for California Residents

This section applies to California residents and supplements the rest of this Policy.

11.1 Categories of Personal Information Collected (last 12 months)

CCPA CategoryCollected?ExamplesSourcesPurpose
IdentifiersYesName, email, account ID, IP addressYou, automaticProvide Service, security
Customer recordsYesBilling name and addressYou, StripePayments, fraud prevention
Commercial informationYesPlans purchased, transaction historyStripeService operation
Internet/network activityYesUsage data, device data, cookiesAutomaticOperations, analytics
Geolocation (coarse)YesCountry, region from IPAutomaticCompliance, fraud prevention
Audio/visual dataYesReference media you upload, generated outputsYou, AI providersProvide Service
InferencesLimitedAggregated usage patternsDerivedImprove safety filters
Sensitive PINoWe don’t intentionally collectn/an/a

11.2 Sale and Sharing of Personal Information

We do not sell personal information for money. Where the CCPA definition of “sharing” (transferring personal information to a third party for cross-context behavioural advertising) may apply, we only do so where you have given the necessary consent.

You can opt out of sharing at any time by emailing privacy@swiftlystudio.com.

11.3 California Privacy Rights

California residents have the right to:

  • Know what personal information we collect, use, disclose, and share.
  • Delete personal information we have collected from you.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of personal information.
  • Limit the use of sensitive personal information.
  • Non-discrimination for exercising these rights.

To exercise these rights, email privacy@swiftlystudio.com. We will acknowledge and respond within the timeframes required by the CCPA.

You may also designate an authorised agent to make requests on your behalf with written, signed authorisation.

12. Automated Decision-Making

The Service applies automated content-moderation filters to detect prohibited content. A filter may automatically block a generation or flag an account for review. Where required by applicable law you may request human review of an automated decision that produces legal or similarly significant effects on you by emailing support@swiftlystudio.com.

13. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact privacy@swiftlystudio.com and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice before they take effect, where reasonably practicable. The “Effective date” at the top reflects the current version.

15. How to Contact Us

ReasonContact
Privacy questions and rights requestsprivacy@swiftlystudio.com
General supportsupport@swiftlystudio.com
Postal mailAddress pending — please use email for now.

For privacy enquiries from any jurisdiction, please use the email address above.