Privacy Policy

Effective date: May 17, 2026

MarketSwarm (“MarketSwarm,” “we,” “us”) operates an autonomous social-media marketing platform at https://marketswarm.app. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. By using MarketSwarm you agree to this policy.

1. Information we collect

Account information

When you sign up we collect your email address, display name, and authentication identifiers from Supabase Auth. If you sign in with Google, Google provides us your email, profile name, and a stable account identifier.

Connected social and productivity accounts

MarketSwarm lets you connect third-party accounts (for example X/Twitter, LinkedIn, Instagram, Facebook, Threads, Google, Notion, GitHub) via OAuth or API keys. We store access tokens, refresh tokens, account identifiers, and the minimum profile data needed to operate the integration. We only request the OAuth scopes required for the features you enable.

For Google, MarketSwarm requests the drive.file scope only. This scope grants MarketSwarm access exclusively to the Google Docs and files you explicitly select through Google’s Drive Picker on the Connectors page. MarketSwarm cannot see, list, or read any other files in your Drive. We do not request access to your Gmail, Calendar, Contacts, or any other Google service. We do not use Google user data to develop, improve, or train generalized AI/ML models, and we do not sell or transfer it to third parties. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Content you create

Posts, drafts, prompts, product descriptions, scheduling rules, images you upload, and content generated by our AI agents on your behalf. This includes metadata such as timestamps, target platforms, and approval state.

Payment information

MarketSwarm bills in XRP or RLUSD on the XRP Ledger. We store your wallet address, transaction hashes, and subscription state. We do not collect or store credit-card numbers; XRP Ledger transactions are public by design.

Usage and device data

We collect logs needed to operate the service: IP address, user agent, request paths, error traces, and feature usage. We use first-party cookies (or equivalent storage) for authentication sessions.

2. How we use information

  • To provide and operate the MarketSwarm service, including the AI agents that draft, schedule, and publish content you authorize.
  • To authenticate users and keep accounts secure.
  • To call third-party APIs you have connected (such as posting to your social accounts).
  • To process subscription payments on the XRP Ledger.
  • To debug, monitor, and improve the service.
  • To send transactional emails (sign-in, billing, security notices).

We do not sell personal information. We do not use the contents of your connected accounts for advertising, profiling, or to train models for third parties.

3. How we share information

We share information only with:

  • Infrastructure providers (Supabase for database and auth, our hosting provider, log providers) acting as processors on our behalf under contractual confidentiality.
  • The third-party platforms you connect, when you instruct us to publish or read content (for example, sending a post to X/Twitter).
  • The XRP Ledger, which is public, when you submit a payment.
  • Authorities when required by law or to protect rights and safety.

4. Data retention

We keep account and content data for as long as your account is active. If you delete your account or disconnect an integration, we delete or anonymize the related data within 30 days, except where we need to retain it for legal, security, or accounting reasons. You can revoke OAuth access at any time from the third party’s account settings (for example, in your Google Account permissions page).

5. Security

OAuth tokens and API keys are encrypted at rest. Connections to MarketSwarm are made over HTTPS. Database access is restricted by Supabase row-level security. No service is perfectly secure; we encourage you to use unique passwords and to revoke integrations you no longer use.

6. Your rights

Depending on where you live, you may have the right to access, correct, port, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email us at eightjohnson9@gmail.com. You can also delete your account at any time from the dashboard, which removes your stored tokens and content.

7. Children

MarketSwarm is not directed to children under 13 (or under 16 where applicable) and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

8. International transfers

MarketSwarm is operated from the United States. If you access the service from outside the U.S., your information will be processed in the U.S. and in the regions used by our infrastructure providers.

9. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised. Material changes will be announced in-app or by email.

10. Contact

Questions or requests? Email eightjohnson9@gmail.com.