SECURITY & PRIVACY
How SWOTPal handles your data
Where SWOTPal stores your analyses, who processes them, how sharing works and how to delete your data. The legal version is our privacy policy.
Where your data lives
- Accounts and analyses are stored in a Supabase (PostgreSQL) database. Row-level security means each account can read and change only its own analyses.
- The site runs on Cloudflare. Every connection uses HTTPS (TLS), and Supabase encrypts stored data at rest.
Who processes it
- AI generation: the text you submit is sent through OpenRouter to the model that writes the analysis. We only allow providers that don't store or train on your prompts, and we don't train on your data either.
- Agent Research: web searches run through Tavily; the agent then reads the public pages it found. Web pages you ask us to analyze are fetched through Jina Reader.
- Payments: Stripe on the web and Apple on iOS. Card details go to them directly β SWOTPal never sees or stores card numbers.
- Sign-in: one-time email codes (sent by Resend) or Google / Apple. We don't store passwords.
- Analytics: Google Analytics. In the EEA, the UK and Switzerland it sets cookies only after you choose Accept All, and Reject All turns its cookies off everywhere.
Sharing is off until you turn it on
- A share link is created only when you click Create link, and Stop sharing revokes it immediately.
- A shared page shows the analysis result only β not your original input, uploaded files or business-interview answers.
- The public gallery lists an analysis only if you tick the box and we review it first.
Deleting your data
- You can delete any analysis from your workspace at any time.
- To delete your account, use Delete account on the Account page (it emails support@swotpal.com). We remove your personal data within 30 days, as set out in the privacy policy.
Security questions or a vendor review: support@swotpal.com