Privacy Policy

Free tier — what we collect

Nothing. The free tier runs entirely on your device. No network requests, no accounts, no tracking. Everything — your tab classifications, corrections, and settings — stays in chrome.storage.local.

Pro & Premium — what we collect

When you sign in and subscribe to a paid tier, we collect the minimum data needed to deliver AI features and manage your account:

• Email address — for authentication via Supabase Auth (Google OAuth or magic link)
• Anonymous device ID — a randomly generated UUID stored in your extension, used to link usage to your account
• Tab metadata — title, URL, and domain of tabs sent to our backend for AI classification. Never page content, never screenshots, never embeddings computed on your device.
• Usage counts — number of AI calls per day, for rate limiting your plan
• Subscription data — Stripe customer ID, subscription status, plan tier, renewal date

What we DON'T collect

• Page content — we never read, save, or transmit what's on the pages you visit
• Browsing history — the extension has no history permission
• Cookies, form data, passwords, or anything you type into websites
• Screenshots, DOM snapshots, or any content rendered by the page
• Personal files, downloads, or anything outside your open tabs

How we use it

• To classify your tabs into categories (Development, Shopping, etc.) and topic groups (e.g. "React hooks tutorials")
• To enforce rate limits on your plan
• To process payments through Stripe and keep your subscription active
• To improve classification accuracy — aggregated and anonymized only, and only if you opt in (Phase 3 feature, coming later)

Third-party services

We rely on a small set of trusted providers:

• Supabase — database, authentication, and Edge Functions. Stores your account and subscription data in the EU region.
• Stripe — payment processing. PCI-compliant. We never see your card details.
• Anthropic — AI classification (Claude). We send tab metadata only. Anthropic does not train on API inputs.
• Voyage AI — embeddings for topic detection. Receives tab metadata only, not identifiable to you.
• Resend — email delivery for waitlist updates and magic link sign-in.
• Vercel — hosts swooptabs.com. Analytics are anonymous and aggregated.

Your rights (GDPR)

If you're in the EU or UK, you have the right to access, export, correct, or delete your data at any time. Email us at hello@swooptabs.com and we'll respond within 48 hours. You can also delete your account directly from the extension popup — all your data is removed from our servers within 48 hours.

Data retention

• Account data: retained until you delete your account
• Tab metadata: not stored — used in-flight for classification, then discarded
• Usage logs: aggregated to daily counts after 30 days; per-call detail discarded
• After account deletion: 48-hour maximum before complete removal

Cookies

swooptabs.com uses only essential cookies for Supabase Auth sessions. No tracking cookies, no advertising cookies, no cross-site tracking. The Chrome extension uses no cookies at all — it stores data in chrome.storage.local.

Changes to this policy

We'll update this policy if we add new data collection or third-party services. Material changes will be announced by email to account holders and in the extension popup at least 30 days before they take effect.

Contact

Privacy questions? Reach out at hello@swooptabs.com. See also our Terms of Service.