Privacy policy :: swiftcraft.io

swiftcraft.io ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you access or use our website swiftcraft.io ("the Website") and the services ("Services") we provide. By using the Website and Services, you consent to the practices described in this Privacy Policy.

1. Information we collect

1.1. Personal information

We may collect personal information from you when you voluntarily provide it to us, such as when you create an account, enroll in a course, or contact our customer support. The personal information we collect may include:

Your name, email address, and contact information
Payment and billing information (processed by Paddle, our payment processor)
Profile information from OAuth providers (if you sign in with GitHub)
Course progress, quiz responses, and poll answers
Wishlist and library information
Communication preferences

1.2. Automatically collected information

When you visit the Website, certain information is automatically collected by our servers and third-party tools. This information may include:

IP address
Browser type and version
Operating system
Pages visited and time spent on pages
Referral source
Device information

We use Vercel Analytics and Speed Insights for performance monitoring, which collect anonymous, aggregated usage data.

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and the context in which we collect it:

Contract performance: Processing necessary to provide our Services (account management, course delivery, payment processing)
Legitimate interests: Improving our Services, preventing fraud, and ensuring security
Consent: Marketing communications (you can withdraw consent at any time)
Legal obligations: Complying with applicable laws and regulations

3. Use of information

We use the collected information for the following purposes:

To provide and improve our Services
To process payments and enrollments
To communicate with you regarding your account and courses
To respond to your inquiries and provide customer support
To send promotional emails and updates (only if you opted in)
To monitor and analyze website usage and trends
To ensure security and prevent fraud

4. Data retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Account information: Retained until you request account deletion
Purchase records: Retained for 7 years for accounting and legal purposes
Session data: Deleted after 30 days of inactivity
Analytics data: Retained in anonymous, aggregated form indefinitely
Support communications: Retained for 3 years

You may request deletion of your personal data at any time, subject to legal retention requirements.

5. Data security

We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

Encrypted data transmission (HTTPS/TLS)
Secure authentication using NextAuth
Regular security updates and monitoring
Access controls and password protection
Secure hosting with Vercel

However, no data transmission or storage system can be guaranteed to be 100% secure, and we cannot guarantee absolute security of your information.

6. Disclosure of information

We may share your personal information with third-party service providers and partners who assist us in delivering our Services:

Paddle: Payment processing and billing (Merchant of Record)
Vercel: Hosting and infrastructure (US-based)
PostgreSQL database: Data storage (via Vercel)
Redis/Vercel KV: Caching (via Vercel)
GitHub: OAuth authentication (if you sign in with GitHub)
Email service provider: Sending authentication emails

These third parties are contractually obligated to handle your data securely and use it solely for the purpose of providing the agreed-upon services.

We may also disclose your personal information if required to do so by law or in response to valid legal requests from government authorities.

6.1. International data transfers

Some of our service providers are based outside the European Economic Area (EEA), particularly in the United States (Vercel, GitHub). We ensure that appropriate safeguards are in place for such transfers, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Privacy Shield certification (where applicable)
Data processing agreements with our service providers

By using our Services, you acknowledge and consent to these international data transfers.

If you are in the EEA, you have the following rights regarding your personal data:

Right of access: Request a copy of your personal data
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data ("right to be forgotten")
Right to restriction: Request limitation of processing in certain circumstances
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Withdraw consent for marketing communications at any time
Right to lodge a complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at contact@swiftcraft.io. We will respond to your request within 30 days.

8. Third-party links and services

Our Website may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to any third-party sites or services, and we are not responsible for the privacy practices of those third parties. We recommend reviewing the privacy policies of any third-party services you use.

9. Children's privacy

The Website and Services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take appropriate measures to remove the information from our records.

10. Your choices

You may update or delete the personal information associated with your account by contacting our support team at contact@swiftcraft.io. You may also:

Opt out of promotional emails by following the unsubscribe link in any marketing email
Disable cookies through your browser settings (see our Cookie Policy)
Request a copy of your data or request deletion
Update your communication preferences in your account settings

11. Changes to the privacy policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated Privacy Policy on the Website with a "Last Updated" date
Sending an email notification if you have an account with us
Displaying a prominent notice on the Website

Your continued use of the Services after such changes constitutes acceptance of the updated Privacy Policy.

12. Data protection authority

If you are in the EEA and have concerns about our data processing practices, you have the right to lodge a complaint with your local supervisory authority. In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD) Website: https://www.cnpd.pt

13. Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us at:

Email: contact@swiftcraft.io Contact form: Available on our website

We will respond to all requests within 30 days.

Privacy policy