Privacy Policy

Swipe File (“Swipe File,” “we,” “us”) is operated by Scale Content Labs, a business established in Portugal. For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for the personal data described in this policy. This policy explains what we collect when you use our website and product, why we collect it, the legal bases on which we rely, and your rights.

Questions about this policy, or to exercise your rights, contact us at hello@scalecontentlabs.com.

• Account information. When you sign up we receive your name, email, and any profile data you provide through our authentication provider (Clerk). We do not see or store your password.
• Workspace content. Lists of LinkedIn creators you choose to track, niches, brand colors, client names, and any notes or settings you add to the app.
• Support communication. If you email us, we keep the message so we can respond and improve the product.

• Usage logs. Standard server logs (IP address, browser, page requests, timestamps) for security and debugging.
• Cookies. We use cookies that are strictly necessary to keep you signed in. We do not use third-party advertising or analytics cookies.

Swipe File aggregates public posts from LinkedIn creators that you choose to track. We do not log into LinkedIn on your behalf and we do not collect data from private accounts or private posts. The posts we display are already publicly visible on LinkedIn.

If you are a LinkedIn creator and want your public posts excluded from Swipe File, email hello@scalecontentlabs.com and we will remove your profile within 30 days.

• Provide and operate the Swipe File product.
• Generate post drafts, templates, graphics, and AI chat responses. To do this, the text you send to the AI features (your prompts, drafts, tracked-post content, and brand notes) is transmitted to third-party AI providers on our behalf via an AI gateway (see “AI processing” and “Subprocessors” below).
• Send you account, security, and support emails.
• Debug issues and improve product reliability.
• Comply with legal obligations.

We do not sell your information, and we do not share it with third parties for their own marketing. We do not use your workspace content to train AI models, and — as described below — we instruct our AI providers not to use it to train theirs.

We rely on a small set of vendors to operate the service. Each processes data on our behalf under their own privacy commitments and data-processing terms:

• Vercel (United States): application hosting.
• Supabase (European Union): database and file storage.
• Clerk (United States): authentication and account management.
• OpenRouter (United States): the AI gateway that routes your AI requests to the underlying model providers below.
• Anthropic (United States): AI model provider (Claude models), used for AI chat, drafting, and lead-magnet detection.
• Zhipu AI / Z.ai(China): AI model provider (GLM models), used for AI chat and drafting. See “AI processing” below for what this means for international data transfers.
• Apify (European Union / United States): public LinkedIn post scraping.

We may change subprocessors as the product evolves. When we add or replace one in a way that materially affects your data, we will update this list and the effective date above.

Swipe File’s drafting, templating, and chat features are powered by third-party large language models. When you use these features, the content you provide to them — your prompts, drafts, the tracked-post text they work from, and any brand notes you include — is sent through our AI gateway, OpenRouter, which forwards it to the model that handles your request. Depending on the request, that model is provided by Anthropic (in the United States) or Zhipu AI / Z.ai (in China).

International transfers.This means some of the content you submit to the AI features may be transferred to and processed in the United States and in China, which are outside the European Economic Area. Where we transfer personal data outside the EEA, we rely on appropriate safeguards permitted under the GDPR (such as the European Commission’s Standard Contractual Clauses) and/or your explicit consent to the transfer, given when you choose to use the AI features. You can use the rest of the app without using the AI features.

No training on your content. We do not use your content to train our own models, and we configure our AI providers so that content routed through the gateway is not used to train their models. AI providers may retain request data transiently for operational, security, and abuse-prevention purposes under their own terms.

AI output can be inaccurate or unintentionally similar to existing material. You are responsible for reviewing anything the AI produces before you publish it (see our Terms of Service).

Your account and workspace data is stored on infrastructure operated by the subprocessors above, primarily in the European Union and the United States. As described in “AI processing” above, content you submit to the AI features may additionally be processed in China. By using Swipe File — and, for the AI features specifically, by choosing to use them — you consent to this storage and processing, subject to the safeguards described in this policy.

If you are in the European Economic Area, we process your personal data on the following legal bases under Article 6 of the GDPR:

• Performance of a contract — to create your account and provide the Service you signed up for, including the core drafting, templating, and chat features.
• Consent— for use of the AI features that send your content to third-party AI providers (including the international transfers described in “AI processing”). You can decline by not using those features, and you can withdraw consent at any time by ceasing to use them.
• Legitimate interests — to secure, debug, and improve the Service, prevent abuse, and aggregate publicly available LinkedIn posts you choose to track, provided those interests are not overridden by your rights.
• Legal obligation — to comply with tax, accounting, and other legal requirements.

We retain workspace data for as long as your account is active. You can request deletion at any time by emailing hello@scalecontentlabs.com. We delete account data within 30 days of a verified request, except where we are required to keep records for legal or accounting purposes.

If you are in the European Economic Area, you have the following rights under the GDPR in relation to your personal data:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”) where the conditions apply;
• restrict or object to certain processing;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email hello@scalecontentlabs.com. We will respond within the time required by the GDPR (generally one month). If you believe we have not handled your data lawfully, you have the right to lodge a complaint with a supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt), or the authority in your country of residence.

We use encrypted connections (TLS) in transit and at rest where supported by our subprocessors. Access to production data is limited to a small number of authorized personnel. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the competent supervisory authority as required by the GDPR.

Swipe File is not directed to children under 16 and we do not knowingly collect their personal information.

This Privacy Policy, and any dispute relating to it or to our processing of your personal data, is governed by the laws of Portugal and the GDPR as applicable in Portugal, without prejudice to any mandatory data-protection rights you have under the law of your country of residence.

We may update this policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you by email.