Privacy Policy

Updated June 24, 2026

Introduction

This privacy notice for Swarf Technology, Inc. ("we," "us," or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

  • Visit our website at swarf.app, or any website of ours that links to this privacy notice
  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@swarf.app.

1. What Information Do We Collect?

Personal information you provide to us. We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include the following: names, email addresses, billing information, contact preferences, contact or authentication data, and content you submit through the Service such as messages, uploaded files, and machine configuration data.

If you sign in using a third-party account, we may receive your name, email address, and profile picture from that provider. Swarf uses passwordless authentication — we do not collect or store passwords.

Payment data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is stored by Stripe. You may find their privacy notice here: stripe.com/privacy.

Information automatically collected. We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, referring URLs, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including but not limited to:

  • To provide the Service. We may process your information to provide you with the requested service, including generating AI responses, processing uploaded files, and maintaining your conversation history and machine configuration.
  • To facilitate account creation and authentication. We may process your information so you can create and log in to your account, as well as keep your account in working order.
  • To process payments. We may process your information to fulfill and manage your subscriptions, credit purchases, and related transactions.
  • To improve our Services. We may process information about how you use our Services to better understand how they are being used so we can improve them. This includes evaluating AI response quality — see §6 for details.
  • To communicate with you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
  • To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
  • To comply with law. We may process your information where we believe it is necessary for compliance with our legal obligations.

3. What Legal Bases Do We Rely On?

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. We may rely on the following legal bases:

  • Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
  • Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
  • Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information to analyze how our Services are used so we can improve them, to diagnose problems, and to prevent fraudulent activities.
  • Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

4. When and With Whom Do We Share Your Information?

We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. The categories of third parties we may share personal information with include, but are not limited to: AI Processing Services, Cloud Computing Services, Data Analytics Services, Data Storage Service Providers, Payment Processors, Communication Tools, Performance Monitoring Tools, and User Account Registration & Authentication Services.

We may also need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to access or store information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove or reject cookies, this could affect certain features of our Services.

6. AI Processing and Product Improvement

The Service uses AI language models provided by third-party providers to generate responses. When you interact with the AI assistant, your messages, conversation history, uploaded files, and machine configuration may be transmitted to these providers to generate a response.

We may also extract key details from your conversations to personalize future AI responses.

We may use interaction data — including conversations, prompts, responses, and usage patterns — to evaluate and improve the Service.

AI-generated output may be inaccurate, incomplete, or unsuitable for your specific situation. See the Terms of Service (Sections 4 and 5) for important disclaimers about AI output and G-code safety.

7. International Data Transfers

If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where we or our third-party service providers operate.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

We may implement measures to protect your personal information for international transfers, including the use of the European Commission's Standard Contractual Clauses where appropriate. Further details can be provided upon request.

8. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

9. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. What Information Do We Collect From Minors?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@swarf.app.

11. What Are Your Privacy Rights?

In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information.

We will consider and act upon any request in accordance with applicable data protection laws. If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent by contacting us using the details provided in the section below. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account information. If you would at any time like to review or change the information in your account or terminate your account, you may contact us at privacy@swarf.app. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

California residents. If you are a California resident, you may have additional rights regarding your personal information under applicable California privacy laws, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale or sharing of personal information. To our knowledge, we do not sell your personal information or share it for cross-context behavioral advertising.

How to exercise your rights. You may contact us at privacy@swarf.app. We will consider and act upon any request in accordance with applicable data protection laws.

12. Do We Make Updates to This Notice?

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last revised on" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

13. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at privacy@swarf.app or write to us at:

Swarf Technology, Inc.
131 Continental Dr, Suite 305
Newark, DE 19713