Privacy Policy

Who we are

Swapfile is operated by Shreyas Gupta, a sole proprietor based in India. We are the data controller for the personal data described below and decide how and why it is processed.

Your files

Files you upload are processed to perform the conversion you requested and are deleted automatically afterwards. We do not read, store, share, or use your files for any other purpose. Legal basis: performance of our contract with you.

What we collect and why

• Account data (email address, login identifiers, and Google account email if you sign in with Google) — to create and secure your account. Legal basis: contract.
• Usage data (conversion counts, plan status, timestamps) — to apply free-tier limits and entitlements. Legal basis: contract.
• Technical data (IP address, device and browser information, error logs) — for security, fraud prevention and service reliability. Legal basis: legitimate interests.
• Support messages you send us — to answer you. Legal basis: legitimate interests.

Who we share data with

• Hosting, database and authentication providers that run the service for us.
• Our external conversion partner, for Premium conversions you request (the file and its format only).
• Paddle, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing. We never see your card details.
• Professional advisers (legal, accounting) and authorities where required by law.

International transfers

Our providers may process data outside your country, including in the EU, UK and the United States. Where required, transfers are covered by Standard Contractual Clauses or an equivalent safeguard.

Retention

Uploaded files are deleted right after conversion. Account and usage data are kept while your account is active and deleted or anonymised within 90 days of account closure, except where we must keep records for legal or tax reasons.

Your rights

Depending on where you live, you may request access to your data, correction, erasure, restriction, portability, or object to processing, and withdraw consent at any time. Contact us and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and least-privilege database rules, to protect your data.

Cookies and advertising

We use essential cookies to keep you signed in. Free-tier pages may show ads served by Google AdSense, which may set analytics and advertising cookies; you can manage these in your browser settings or via Google's ad settings. Paid plans are always ad-free.

Contact

Questions about this policy or your data? Contact Shreyas Gupta using the contact details in the footer.