Skip to content
Swoop
Join the waitlist

Privacy Policy

Last updated: November 2026

The short version

Swoop's free tier classifies your tabs entirely on your device — tab data never leaves your browser unless you choose to spend one of the 10 one-time AI credits a free account includes. (Optional sign-in adds account-status calls: sign-in state, usage counters, referral status — never your tabs.) Paid tiers and spent credits send tab metadata — the title, the domain, and the page address with everything after the ? or # removed — to our backend for AI classification. On paid plans this happens automatically as you browse, which is what keeps your groups current without you having to ask. It's processed in memory and discarded: never stored by us, never sold, and never used to train AI models. We never send page content or screenshots, and we never read your browser history. Because we strip the query string and fragment on your device first, a token carried in one — a password reset, a magic link, an OAuth callback — is removed before the request is sent. Two honest limits: a token built into the page path can't be removed without breaking classification, and a page's own title is sent as it wrote it. (The one place a full address is sent is the feedback form, where you see the exact URL and choose whether to attach it — see below.)

Free tier — what we collect

Nothing about your tabs, unless you spend an AI credit. Free-tier classification runs entirely on your device — no account required, no tracking. Everything — your tab classifications, corrections, and settings — stays in chrome.storage.local. If you choose to sign in while on the free tier (for referrals, for the 10 one-time AI credits a free account includes, or before upgrading), your browser makes account calls — sign-in state, usage counters, and referral status — and your tab titles and URLs still never leave your device unless you choose to spend an AI credit. Spending one sends that Organize run's tab titles and URLs for classification, on exactly the same terms as a paid tier: processed in memory and discarded — never stored by us, never sold, and never used to train AI models.

Pro & Premium — what we collect

When you sign in and subscribe to a paid tier, we collect the minimum data needed to deliver AI features and manage your account:

  • Email address — for authentication via Supabase Auth (Google OAuth or magic link)
  • Anonymous device ID — a randomly generated UUID stored in your extension, used to link usage to your account
  • Tab metadata — title, URL, and domain of tabs sent to our backend for AI classification. Processed in-flight, then discarded — never stored (see "What we can see" below). Never page content, never screenshots, never embeddings computed on your device.
  • Usage counts — a timestamped count of your AI calls, for rate limiting your plan
  • Subscription data — Stripe customer ID, subscription status, plan tier, renewal date

What we can see

Even on paid tiers, our servers can see surprisingly little. AI requests are processed in memory and discarded — no tab title, URL, or content is ever written to our database. What we can see:

  • Usage counts — which feature you called and on what day, for rate limiting. Never what was in the request.
  • Account & subscription info — email, plan tier, and Stripe subscription status
  • What you explicitly send us — if you submit feedback, we store the message you typed (and the page URL it was sent from, so we can reproduce bugs)
  • Sign-up protection — when you create an account, a keyed hash of your IP address (deleted within 25 hours) and the time your free AI credits were granted (deleted within 3 hours)
  • Trial protection — when you start a free trial, a fingerprint of the payment method that started it: Stripe's card or bank-account fingerprint (never the number), the PayPal account id, or for Link a keyed one-way hash of its email

How Swoop learns

When you drag a tab to a different group or correct a category, Swoop remembers — right on your device. Corrections live in your browser's local storage and personalize classification locally. They are not sent to our servers, and we never train AI models on your browsing.

Coming soon: community corrections. We're building a way to share corrections — anonymized and stripped of any identifiers — so everyone's defaults get better. The consent toggle already ships in the extension, switched on by default, and you can switch it off in Settings at any time; nothing is collected until the feature launches.

On-device AI on Firefox

Swoop's on-device classifier runs locally on both Chrome and Firefox — the same model, the same categories, the same results. It is slower on Firefox, because Firefox extensions can't use multiple CPU threads for it, so sorting a large window takes longer there. On the free tier nothing leaves your device on either browser unless you choose to spend an AI credit. Paid plans and AI credits need Swoop connected to your account. The Chrome extension can connect; the Firefox add-on can't yet, so in Firefox only the free, on-device sorting is available.

What we DON'T collect

  • Page content — we never read, save, or transmit what's on the pages you visit
  • Browsing history — the extension has no history permission
  • Cookies, form data, passwords, or anything you type into websites
  • Screenshots, DOM snapshots, or any content rendered by the page
  • Personal files, downloads, or anything outside your open tabs

How we use it

  • To classify your tabs into categories (Development, Shopping, etc.) and topic groups (e.g. "React hooks tutorials")
  • To enforce rate limits on your plan
  • To refuse sign-ups from disposable (temporary) email services, which are used to collect the free AI credits over and over — our legitimate interest in keeping the free tier sustainable
  • To limit how many new accounts one network can open, and to grant the free AI credits once per email inbox — the same legitimate interest. You can object to this processing by emailing us; it only runs when an account is created
  • To give each card, bank, PayPal or Link account, and each Swoop account, one free trial — our legitimate interest in preventing trial abuse. You can object to this processing by emailing us
  • To process payments through Stripe and keep your subscription active
  • To improve classification accuracy for everyone — anonymized community corrections, coming later. Nothing is collected until it launches, and you can opt out anytime in the extension's Settings (see "How Swoop learns" above)

Third-party services

We rely on a small set of trusted providers:

  • Supabase — database, authentication, and Edge Functions. Stores your account and subscription data. Hosted in the United States (Amazon Web Services, us-east-1) — see "Where your data is processed" below.
  • Stripe — payment processing. PCI-compliant. We never see your card details — except that, when a free trial starts, our server receives the payment method's summary from Stripe (such as its brand, last four digits and expiry — never the full number or security code), uses it only to recognise the method, and keeps nothing from it but a fingerprint, to apply the one-free-trial rule.
  • Anthropic — AI classification (Claude). We send tab metadata only. Anthropic does not train on API inputs and automatically deletes API data within 30 days at most (retained longer only if flagged by their safety systems).
  • Voyage AI — embeddings for topic detection. Receives tab titles and domains only (no full URLs), not identifiable to you. Our organization has opted out of Voyage's data training, so your data is deleted immediately after processing and never used to train their models.
  • Resend — email delivery for waitlist updates and magic link sign-in.
  • Vercel — hosts swooptabs.com. Analytics are anonymous and aggregated. The homepage also sends our own server anonymous notes about which sections were seen and which buttons were pressed, with no cookie and no identifier, and sends none when your browser asks not to be tracked.

Where your data is processed

Swoop is run from Slovakia, but every provider above is established outside the EEA, so your personal data is transferred out of it. Under EU law each such transfer needs a safeguard. Here is the one each provider relies on — we checked every certification below against the official list at dataprivacyframework.gov on 2 September 2026.

  • Supabase (Supabase Pte. Ltd., Singapore), hosting your data on Amazon Web Services in the United States. No Supabase entity appears on the Data Privacy Framework list, so this transfer relies on the European Commission's Standard Contractual Clauses (Decision 2021/914, controller-to-processor), incorporated into Supabase's Data Processing Addendum, with the UK Addendum where applicable.
  • Anthropic — not certified under the Data Privacy Framework; transfers rely on the Standard Contractual Clauses incorporated into Anthropic's Data Processing Addendum.
  • Voyage AI (Voyage AI Innovations, Inc., a MongoDB company). Listed as a covered entity under MongoDB, Inc.'s active EU–US Data Privacy Framework certification for non-HR data; its Data Processing Addendum separately applies the Standard Contractual Clauses to transfers the Framework does not cover. Voyage does not publish a fixed processing region, so processing may also take place elsewhere.
  • Stripe — we contract with Stripe Payments Europe, Limited (Ireland). Onward transfers to Stripe, LLC in the United States rely on Stripe, LLC's active Data Privacy Framework certification, with the Standard Contractual Clauses as the fallback in Stripe's Data Transfers Addendum. For fraud prevention, anti-money-laundering and its own legal duties Stripe acts as an independent controller under its own privacy policy, not as our processor.
  • Resend (Plus Five Five, Inc., United States) — listed on the Data Privacy Framework for non-HR data; its Data Processing Addendum applies the Standard Contractual Clauses to any transfer an adequacy decision does not cover.
  • Vercel (Vercel Inc., United States) — an active participant in the EU–US Data Privacy Framework, its UK Extension and the Swiss–US Data Privacy Framework. Vercel runs a global edge network, so this data may also be processed in other countries.

You can ask us for a copy of these safeguards at hello@swooptabs.com.

Your rights (GDPR)

If you're in the EU or UK, you have the right to access, export, correct, or delete your data at any time, and to object to the processing we base on legitimate interest (the sign-up checks above). Email us at hello@swooptabs.com and we'll respond within one month, and in practice within a few days.

You can also delete your account yourself, without asking us. Open Swoop's Settings, scroll to Danger zone and choose Delete account (the account menu in the popup links straight there). You will be shown exactly what is deleted and asked to type a confirmation. It is immediate and permanent: your account, subscription records, custom categories, corrections, usage history, referral records, any feedback you sent and any waitlist entry are erased from our live systems, and your payment details are deleted at our payment provider. If you have an active subscription it is cancelled at the same time.

Data retention

  • Account data: retained until you delete your account
  • Tab metadata: never stored by Swoop — processed in memory, then discarded. Our AI providers don't keep it either: Anthropic auto-deletes API data within 30 days at most, and Voyage AI deletes it immediately after processing
  • Usage logs: each entry holds only a feature name and date — never tab data — and is retained until you delete your account
  • Trial protection: the fingerprint of the payment method that started a free trial is kept for 24 months, then deleted — and if you delete your account sooner it is kept unlinked from you until then, so deleting an account never frees a trial for that card
  • Sign-up protection: when you create an account we keep a keyed hash of your IP address — in that record, never the address itself — for counting new sign-ups per network. It is deleted within 25 hours, and unlinked from you straight away if you delete your account before then
  • After account deletion: removed from our live systems immediately, except the sign-up protection record and the trial-protection fingerprint above, which are unlinked from you and expire on schedule. Encrypted database backups are kept up to 7 days for disaster recovery and are then overwritten — data in a backup is never used for anything else. Our payment provider, Stripe, keeps invoice and transaction records where accounting and tax law requires it, and tab titles and addresses already sent to our AI providers are held only for the retention periods listed above

Cookies

swooptabs.com uses only essential cookies for Supabase Auth sessions. No tracking cookies, no advertising cookies, no cross-site tracking. Swoop's extension uses no cookies at all — it stores data in chrome.storage.local.

Changes to this policy

We'll update this policy if we add new data collection or third-party services. Material changes will be announced by email to account holders and in the extension popup at least 30 days before they take effect.

Contact

Privacy questions? Reach out at hello@swooptabs.com. See also our Terms of Service.