What we store
We store your account and sign-in information, your timezone and settings, the handles you track, and the public profile and post data recorded for them. If you subscribe, we store a reference to your Stripe customer and subscription and its status. We do not receive or store your card details.
Where the data comes from
Swell reads public profile and post data from Instagram, TikTok, YouTube and X. It does not need your social account password and does not sign in to your social accounts.
Public data is collected on a schedule through Apify, and through the YouTube Data API for YouTube. For a handle that a wavehappy tracker already reads, it is copied from that tracker instead. Collection starts once your subscription is paid.
YouTube data is collected through YouTube API Services. Their use is covered by the YouTube Terms of Service and the Google Privacy Policy.
How long we keep it
Your account, handles and readings are kept while your account is open, including after a subscription ends, so your history stays readable. Connection logs are removed after 90 days.
When you delete your account, your subscription is cancelled and your account, handles, readings, posts, goals, billing references and connection logs are removed at once, or within 24 hours if the first attempt fails. Your sign-in record with Supabase Auth is kept separately; write to hello@wavehappy.art to have it removed.
Stripe keeps its own payment records under its own policies and legal obligations. Hosting backups age out on the hosting provider's schedule.
What your assistant can read
The connection reads data for your signed-in account only. It can return tracked handles, display names, status and schedule; profile readings with followers, following, post count and platform-specific fields; and the account's cadence, pause state and timezone.
It can also return post time, type, public URL, duration and available views, likes, comments, shares and saves; captions when requested; post snapshots; follower goals; missed reading dates; and data notes included with mirrored tracker data.
What the connection does not expose
The connection does not expose your account email, payment details, notification settings, device tokens, error text or internal identifiers. Your assistant does not contact social platforms through the connection. It reads the stored copy.
Connection logs
For each connector call, we record the account associated with the call, the tool name, the call time, its outcome and elapsed time in milliseconds. An unrecognized tool name is recorded as unknown. Outcomes are started, ok, input_error, failed or rate_limited.
These call logs do not store tool arguments, prompts or results. The daily retention run removes call records after 90 days. The records support a limit of 60 calls per minute per account. They are not visible in the app or to the assistant.
Separately, when a tool fails, Vercel hosting error logs record the tool name, an internal account identifier and the error type, without arguments or content.
Who handles your data
We use these service providers to run Swell: Stripe for payments, Apify for collecting public profile and post data, the YouTube Data API from Google for public YouTube data, Postmark for email, Supabase for the database and sign-in, and Vercel for hosting.
Supabase Auth handles sign-in through OAuth and keeps standard authentication records, including sign-in times and issued or refreshed tokens.
Your AI assistant receives data only when it calls a Swell tool: OpenAI, when you use ChatGPT, and Anthropic, when you use Claude once it is available. Only the rows returned by that call are shared. Each provider handles that content under its own policies.
Your choices
You can disconnect in the assistant to end that connection's access. Deleting your account also ends access. Contact hello@wavehappy.art for access, export, correction or deletion requests.
Contact
For privacy questions, write to hello@wavehappy.art.
Swell is operated by wavehappy, owned by Kat Moore, Florida, United States.