Privacy policy

Last updated: 1 June 2026

This policy explains what SWORD ("we", "us") collects about you, why, and what you can do about it. We've tried to keep it short and plain.

What we collect

• Account info - your name and email address, captured via Google Sign-In. We never see or store your Google password.
• Usage - which Facebook pages you submit for analysis, how many reports you run, how many tokens you spend, and the conversations you have with Sword Master. We need this to deliver the service and to bill correctly.
• Public Facebook content - the posts, reactions, comment counts, and share counts of the pages you analyze. We only fetch publicly available data - content visible to anyone without logging in. We do not access private profiles, friends-only posts, or anything behind a Facebook login.
• Payment info - handled entirely by Stripe. Card numbers never touch our servers; we receive only the payment event and the last four digits, if any.
• Browser storage - a session cookie to keep you logged in, plus a localStorage entry per report that holds your chat thread with Sword Master so it survives a refresh.

What we don't do

• We don't sell your data.
• We don't run third-party advertising on the product.
• We don't track you across other websites.
• We don't collect biometric or other sensitive personal data.

Who we share with

SWORD relies on a small number of third-party processors. Each only sees what they need to do their job.

• Google - sign-in. Sees your email when you authenticate.
• Stripe - payment processing. Sees the payment, not the report content.
• Amazon Web Services (AWS) - hosts our servers, database, and stored report files.
• Anthropic / AWS Bedrock - runs the language model behind Sword Master. Your prompts and the report data are sent to the AI provider to generate a reply; the provider's API agreement prohibits training on your content.
• Webshare - a rotating-proxy provider we use to fetch public Facebook pages reliably. It sees the URLs of pages you submit, nothing about you.

How long we keep things

• Tokens and ledger history - kept for as long as your account exists, and erased on request or after 24 months of inactivity.
• Reports - kept until you delete them; you can delete any report from the Reports list at any time.
• Chat threads - stored in your browser's localStorage only; clearing site data removes them.
• Sign-in & payment audit logs - kept for 24 months for fraud, accounting, and abuse-prevention purposes.

Your rights

You can ask us, at any time, to:

• Send you a copy of every piece of data we hold about you.
• Correct anything that's wrong.
• Delete your account and everything tied to it.

Email support@cloudimpl.com and we'll respond within 30 days. If you're in the EU, UK, or California, the relevant local laws (GDPR, UK-GDPR, CCPA) apply and we honour them.

Children

SWORD isn't intended for people under 16. If we learn we've collected data from someone under 16, we'll delete it.

Changes to this policy

If we change anything material, we'll email you and update the "last updated" date at the top of this page.

Contact

Questions about privacy? support@cloudimpl.com