Privacy Policy
Effective: September 21, 2026 · Version 1.0
[Legal entity name] (the "Company") operates the aiSwingX™ service (the "Service"). This Policy explains what personal data we collect, why, how long we keep it, with whom we share it, and the rights you have. We comply with applicable U.S. law and, for users in the Republic of Korea, the Personal Information Protection Act.
1. Data We Collect
| Category | Data | How |
|---|---|---|
| Account | Email address (required); name and language (optional); password (only a one-way hash, if you set one); email and name provided by Google if you use Google sign-in | Sign-up, profile, Google sign-in |
| Billing | Plan, amount and currency, payment dates, Stripe customer ID, billing address and business tax ID (if entered on Team/License plans). Card numbers are processed by Stripe and never stored by us. | Stripe checkout |
| Team plan | Email addresses of members added by the team owner | Team management page |
| Usage logs | Pages visited, timestamps, browser type, device type, country (Cloudflare header), referrer. IP addresses are stored only as a daily-salted hash; the original IP is not retained. | Automatically while using the Service |
| Activity logs | Login time and method, subscription and payment events, API key issuance and revocation, support requests, with the IP address at that time | Automatically (dispute and abuse prevention) |
| API usage | API key identifier, endpoint, response code, latency, User-Agent, IP hash | Automatically on API/MCP calls |
| Support messages | Category, title, body | Messages menu |
| Alert sign-ups | Email address, sign-up source | Alert form |
2. Purposes
- Identifying members, login and account management
- Entering into and performing subscription contracts, processing payments, issuing receipts and invoices, handling refunds
- Sending new-article alerts and service notices
- Responding to support requests and resolving disputes
- Preventing abuse, maintaining security, enforcing API limits
- Aggregate usage statistics and service improvement (including distinguishing human, search-engine and AI-crawler traffic)
- Complying with legal obligations (tax and accounting record-keeping)
3. Retention
| Data | Retention |
|---|---|
| Account | Deleted on account deletion (email replaced with a non-identifying value) |
| Billing and subscription records | As required by tax and accounting law (typically 5–7 years) |
| Usage logs (page views) | 13 months from collection |
| Activity logs | 3 years from collection (disputes and chargebacks) |
| API usage | 13 months from collection |
| Support messages | 3 years after resolution |
| Alert sign-up emails | Deleted on unsubscribe or request |
4. Sharing
We use personal data only for the purposes in Section 2 and do not disclose it to third parties without your consent or a legal basis, except:
- Team plan: the team owner can see the email addresses and registration dates of members they added.
- Lawful requests from law-enforcement or regulatory authorities.
5. Processors and International Transfer
Our servers are located in the United States, and the processors below are U.S. companies; your data is therefore transferred to and stored in the United States.
| Processor | Service | Data |
|---|---|---|
| Stripe, Inc. | Payments, subscriptions, invoicing | Email, payment instrument, billing address, tax ID |
| Google LLC | Email delivery (Gmail), Google sign-in, reCAPTCHA, Google Analytics (if enabled) | Email, name (sign-in), access data |
| Vultr Holdings Corp. | Server hosting | All data stored by the Service |
| Cloudflare, Inc. | Traffic protection and delivery (if used) | Access data |
6. Your Rights
- You can view and correct your data at any time (Account → Profile).
- You can delete your account from account settings. Account data is deleted immediately; billing records required by law are kept for the periods in Section 3.
- You can opt out of new-article alert emails at any time.
- You may raise questions, objections or complaints about our processing through the contact in Section 7; we respond without undue delay.
- If you use Google sign-in you can revoke the connection in your Google account settings.
- Residents of California and other jurisdictions with specific privacy laws may have additional rights (access, deletion, non-discrimination). We do not sell personal data.
7. Privacy Officer
Name: [Name] · Title: [Title] · Email: aiswingx.com@gmail.com
8. Cookies and Similar Technologies
| Name | Purpose | Duration |
|---|---|---|
| session | Keeps you logged in and remembers language (essential) | 30 days |
| tz | Your browser's time zone, so dates display in local time (essential) | 1 year |
| theme (localStorage) | Dark/light preference (optional) | Until cleared |
| Google reCAPTCHA | Automated-abuse prevention on forms | Per Google's policy |
| Google Analytics (if enabled) | Usage statistics | Per Google's policy |
9. Security
- Encryption in transit (TLS); one-way hashing of passwords; hashing of IP addresses
- No storage of payment instruments (delegated to Stripe, a PCI DSS-compliant processor)
- Restricted administrator access, access logging, firewall and intrusion blocking
- Regular database backups with controlled access
10. Children
The Service is intended for users aged 18 and over. We do not knowingly collect data from children under 14 (or under 13 in the United States) and delete such data promptly if discovered.
11. Changes
We may update this Policy as law or the Service changes. Updates are announced in the Service at least 7 days before they take effect; changes materially affecting your rights are also announced by email.
12. Contact
Privacy questions may be sent through the Messages menu after login or to:
[Legal entity name] · [Address] · Email: aiswingx.com@gmail.com