Privacy Policy
Effective August 29, 2026
This is SwiftSpec's beta privacy policy. It is in effect now and will be updated when legal review is complete.
1. What we collect
- Account information. Our authentication provider (Clerk) collects your name, email address, sign-in credentials or third-party sign-in identifiers, and organization membership and role if your firm uses a company workspace.
- Project data. Content you create in the Service is stored in our database and associated with your account and organization. This includes project parameters, addresses you look up, specification text, edited master sections, and uploaded files such as a titleblock.
- Usage and log data. We collect standard technical data: IP address, browser and device information, pages and features used, and timestamps. This includes per-account access logs for the master library.
- Cookies. We use cookies for sign-in sessions and security. We do not use advertising cookies.
2. How we use it
We use this information to provide and secure the Service, operate accounts and company workspaces, store and sync your projects, respond to support requests, and monitor performance and abuse. We do not sell your personal information. We do not use your project data to train machine-learning models.
3. Who we share it with
- Service providers that host and operate the Service on our behalf: Clerk (authentication), Supabase (database and file storage), and Netlify (hosting and content delivery). Site lookups query public geographic and code-data services with the coordinates or address being looked up.
- Your organization. If your account belongs to a company workspace, organization administrators can see membership, and company projects are visible to members.
- Legal and safety recipients, when required by law or to protect rights, safety, or the integrity of the Service.
- A successor entity in a merger, acquisition, or sale of assets, subject to this policy.
4. Retention and security
We retain account and project data while your account is active. After closure, project data remains exportable for 30 days and is then deleted from active systems. Backups expire on a rolling cycle. Data is encrypted in transit, access is authenticated and row-level scoped, and our hosting providers operate SOC 2-audited infrastructure. No system is perfectly secure, so safeguard your credentials.
5. Your choices
You can update account information in your account settings, export your projects with the Service’s export features, and request deletion of your account and data through your account or via swiftaec.com. The Service is for business use by adults and is not directed to anyone under 18.
6. Changes
We may update this policy. Material changes will be announced in the app before taking effect. The current version is always available at swiftaec.com/privacy.