Privacy Policy

Account information: your name, email address, and password, stored as a salted hash, never in plain text.

Business profile: the company details, audience notes, goals, tone, and brand assets (logos, colors, files) you give us during onboarding.

Connected-platform data: when you connect Facebook or Instagram, we receive an OAuth access token and, through it, the page or account information, posts, and performance insights covered by the permissions you grant. We never ask for your Meta password.

Content and communications: the free-audit input you submit, chat messages with our AM assistant, and any notes or edits you leave on a plan item.

Usage and log data: basic technical logs (timestamps, request identifiers, error traces) used to run and secure the service.

To run your audits, generate your strategy and monthly plan, produce and publish the content you approve, and, where you have enabled it, manage campaigns on your own ad account.

To generate your weekly and monthly performance reports, respond to you in chat, send service notifications (approval reminders, payment issues, campaign updates), and improve the product.

We do not sell your information, and we do not use your connected-account data to advertise to you or to any third party.

Facebook Page and Instagram Business data is accessed only through the scopes you explicitly authorize during connection, and used only to operate your Swazona Media account: reading insights to build your audit and reports, and publishing posts you have approved.

We never share Meta platform data with third parties for their own purposes, and we do not use it for any advertising unrelated to your own account.

Meta data tied to a connection is deleted when you disconnect that account, or in full when you delete your Swazona Media account, per the data-deletion section below.

Connected-account access tokens are encrypted at rest; we never write them, or your password, to logs in plain text.

Access to client data inside Swazona Media is limited to what the service needs to operate. Any content pulled from your site or accounts is isolated before it ever reaches an AI model, so it can only be read, never treated as an instruction.

Paddle.com Market Ltd is our payment processor and Merchant of Record: Paddle handles checkout, invoicing, tax and VAT, and refunds for every subscription and one-time purchase.

We never see or store your full card number. Paddle's own privacy policy governs how they process your payment details.

We keep your account data for as long as your account is active, so the service keeps working correctly.

When you cancel or your account is deleted, we retain only the minimal billing records required by tax law, and delete everything else, as described in the data-deletion section below.

Wherever you're protected by Jordan's Personal Data Protection Law, the GDPR, or a similar law, you have the right to access, correct, export, or delete your personal data, to object to or restrict some processing, to withdraw consent at any time, and to lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. We respond to every request.

We use one essential cookie to keep you signed in. We do not use third-party advertising cookies or tracking pixels.

When enabled, we use a privacy-respecting analytics tool (PostHog or Plausible) to understand aggregate traffic to swazona.media. It is off by default and never tied to your account data.

Swazona Media is a business tool. It is not directed at, and we do not knowingly collect information from, anyone under 18.

If we make a material change to this policy, we will update the date at the top of this page and notify you by email or in-app notification.

You can delete your account and every piece of data tied to it at any time, in two ways: from your dashboard, open Settings and choose "Delete account", or email [email protected] from the address on file and ask us to delete it for you.

Once a deletion request is confirmed, we revoke and permanently delete every connected-account access token immediately (Facebook and Instagram access is cut right away). We can export a copy of your audits, strategy, plan, and decision ledger to you on request, then delete them from our systems, and we purge your brand assets and chat history.

We retain only the minimal billing records tax law requires us to keep; everything else is gone. Deletion requests are completed within 30 days.