Privacy Policy

Swimdraft ("we", "us") is operated by Alconbury Tech Ltd, a company registered in England and Wales. This policy explains what personal data we collect when you use swimdraft.com, why we collect it, and the choices you have. We act as the data controller for the personal data described here.

What we collect

• Account data. Your name, email address, and a password when you create an account. Passwords are hashed by our authentication provider; we never see or store them in plain text.
• Content you submit. The notes you type and the text extracted from files you attach (transcripts, spreadsheets, documents). Attached files are parsed in your browser; only the extracted text is sent to our servers, and only for the purpose of generating your diagram. We do not store your notes or attachments after the generation completes.
• Your diagrams. Generated and edited diagrams are saved to your account so you can return to them, listed under "My diagrams" in the studio. You can delete any saved diagram at any time, which removes it from our database.
• Usage records. For each generation we record metadata only: timestamps, token counts, processing cost, and whether it succeeded. This powers your credit balance and our billing. It does not include the content of your notes or diagrams.
• Payment data. Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers. We store only the purchase record (pack, amount, credits granted).
• Cookies. We use strictly necessary session cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

How your content is processed

To generate a diagram, the text you submit is sent to Anthropic (our AI provider) via its API. Under Anthropic's API terms, content submitted through the API is not used to train its models, and is retained by Anthropic for a limited period for abuse prevention before deletion. We recommend not including unnecessary personal or sensitive data in the content you submit.

Our service providers

• Vercel — website hosting (USA)
• Neon — database and authentication (USA)
• Anthropic — AI processing of submitted content (USA)
• Stripe — payment processing (USA)

Where these providers process data outside the UK/EEA, transfers are protected by standard contractual clauses or an applicable adequacy framework.

Why we process your data (legal bases)

• To provide the service you signed up for (performance of a contract)
• To meter usage, prevent abuse, and secure the service (legitimate interests)
• To process payments and keep accounting records (contract and legal obligation)

Retention

Account data, saved diagrams, and usage records are kept while your account is active. You can delete individual diagrams at any time. If you delete your account, we delete your account data and saved diagrams, and anonymise usage records except where we must keep them for tax or accounting purposes. Submitted notes and attachments are not retained by us after generation, as described above.

Your rights

Under UK GDPR you can ask us for access to, correction of, or deletion of your personal data, ask us to restrict or object to processing, and request portability. You can also complain to the Information Commissioner's Office (ico.org.uk). To exercise any of these rights, contact us at the address below.

Contact

Alconbury Tech Ltd — support@swimdraft.com

We may update this policy as the product evolves; material changes will be announced on this page with a new "last updated" date.