Privacy Policy

1. Introduction

This Privacy Policy explains how MAXY Investment Inc., a Texas corporation, doing business as SwipenDone (“SwipenDone,” “we,” “us,” or “our”), collects, uses, shares, and retains information. SwipenDone turns a seller’s product manuals into scannable instruction guides; the data involved differs for sellers (who create guides) and buyers (who scan them).

2. Information we collect

From sellers

• Account and profile — email address, any brand name you set, and billing information processed through our payment processor.
• Content you create — the product manuals, photos, and guides you upload or generate.
• Usage information — pages viewed, features used, device and browser identifiers, IP address, approximate location derived from IP, and error diagnostics.

From buyers

• Warranty registration (only if you choose to register) — name, email, phone, and shipping address. These are provided so the seller can honour a warranty and ship parts.
• Diagnosis (only if you use it) — the text and any photo you submit describing a problem, so the AI can suggest a fix.
• Usage analytics — anonymous events about how a guide is used (scans, which steps are reached, ratings). These are not tied to your identity.

For purposes of the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), the statutory categories we collect are identifiers (name, email, phone, postal address, IP, device identifiers), customer records (billing information), commercial information (subscription tier, transactions), internet/network activity (usage and diagnostics), and geolocation (approximate, from IP). We do not knowingly collect sensitive personal information under CPRA § 1798.140(ae).

3. How we use information

We use the information described above to:

• Generate, translate, host, and display guides.
• Pass warranty registrations and part requests to the relevant seller.
• Provide AI diagnosis when a buyer asks for it.
• Give sellers aggregate analytics about their guides.
• Provide support, and detect and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations and enforce our rights.
• Send product updates, security notices, and (with your consent) marketing communications.

We do not train AI models on your data

We do not use your account information, your content, or AI-generated output to train, fine-tune, or otherwise develop generalized machine-learning models — neither our own nor those of any third party. Data processed by our AI provider is subject to its no-training contractual terms, described in section 4.

4. AI processing

SwipenDone uses a third-party AI provider — currently Anthropic (Claude) — to generate and translate guide content and to power diagnosis. When the Service sends data to the provider:

• Only the content needed for the specific task is transmitted.
• The provider acts as a data processor under an agreement that prohibits using the data to train its models for other customers.
• Generated output is treated as your data and subject to the same protections as the input.

5. How we share information

A buyer’s warranty registration and part requests are shared with the seller of that product — that is the purpose of registering. We otherwise use service providers to run the Service, who process data on our behalf under their own terms:

• Supabase — hosting, database, and file storage.
• Vercel — application delivery.
• Stripe — payment processing.
• Anthropic — AI generation, translation, and diagnosis.
• Resend — transactional email.

We do not sell personal information. We may disclose information where required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets.

6. Cookies and tracking

SwipenDone uses only the cookies needed to keep you signed in and to run the Service. Guides are designed to work without requiring buyers to sign in, and buyer-side analytics are anonymous.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated personal information.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent to marketing communications.
• Opt out of any “sale” or “sharing” of personal information as defined under CCPA/CPRA (even though we do not believe we engage in either).

To exercise any of these rights, email contact@swipendone.com. We will respond within the timeframes required by applicable law. A buyer may also ask the seller they registered with; sellers can delete a guide (which removes its associated buyer data) and delete an individual warranty registration.

California — Do Not Sell or Share My Personal Information

We do not currently “sell” or “share” personal information under CCPA/CPRA. To submit a Do-Not-Sell-or-Share request anyway (it will be honored as a forward-looking opt-out), email contact@swipendone.com with that subject line. You may designate an authorized agent to make the request on your behalf.

European Economic Area, United Kingdom, Switzerland

If you are located in the EEA, the UK, or Switzerland, you may lodge a complaint with your local data protection authority. UK residents may contact the Information Commissioner’s Office (ICO) at ico.org.uk. You may also contact us first at contact@swipendone.com.

8. Retention

We keep personal information for as long as your account or guide is active and for a reasonable period afterward to handle support, enforce agreements, and comply with law. When an account is deleted we remove or anonymize personal information within 90 days, except where retention is required for legal, accounting, or fraud-prevention purposes.

• Account and profile — kept while active; removed or anonymized within 90 days after deletion.
• Seller content (manuals, photos, guides) — kept while the guide exists; deleting a guide removes it and its associated buyer data.
• Buyer registrations — kept until the seller deletes the registration or the guide, or as needed for warranty purposes.
• Analytics and usage logs — retained up to 13 months, then aggregated or deleted.
• AI inference logs — held no longer than 30 days on the provider side per its terms; we do not retain a separate copy beyond what is needed to render the output to you.
• Billing and tax records — retained for at least 7 years for tax and audit compliance.
• Backups — encrypted backups roll off on a routine cycle; deleted records leave active systems immediately and backups as the cycle completes.

9. Security

We apply industry-standard administrative, technical, and physical safeguards, including encryption in transit (TLS) and at rest, access controls, audit logging, and regular security reviews. No method of transmission or storage is 100% secure, but we work to protect your information and promptly investigate and address incidents.

10. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice in the Service at least 30 days before they take effect. The “last updated” date at the top of this page always reflects the current version.

12. Contact

Questions about this Privacy Policy can be directed to contact@swipendone.com.