Privacy Policy

Swyfl.it is a custom-software consultancy based in the United Arab Emirates. We design and build internal-operations software for SMBs across the Gulf and internationally. "We", "us", and "our" refers to Swyfl.it.

When you visit our website, we collect: • Standard server log data: your IP address, browser user-agent, the pages you view, and timestamps. We use this to keep the site running and to detect abuse. • Anonymous analytics events: which pages you view, which demos you start, which tour steps you complete, and similar interactions. These events are tagged with a session ID generated per browser tab. • Locale preference: your chosen language is stored in a cookie called swyfl-locale so we can serve the right content next time. This is the only cookie we set without your interaction. When you submit our forms (demo email gate, discovery call request), we additionally collect: your name, work email, company, optional role and phone, and any free-text message you write. Once you submit an email, the analytics events you generated in that session are linked to a hash of your email so we can see your full journey.

• To run the site and prevent abuse. • To understand how our demos perform: which sections resonate with prospects, where people get stuck, which language drives more engagement. • To follow up about our services if you submitted an email or booked a discovery call. • To comply with applicable legal obligations. We do not sell your data. We do not run third-party advertising or behavioural tracking on our site.

Each demo includes an AI assistant. When you use it, your typed messages are sent to our server and forwarded to Anthropic's Messages API to generate a response. We log message metadata (timestamp, the prompt with light PII redaction, detected language, latency, tools the assistant invoked, model used) for analytics. We do NOT store the assistant's full responses. Demo state and chat history are not persisted after you close the demo tab.

Lead records, analytics events, and AI message metadata are stored in our managed Postgres database (Supabase). We've configured the project in a region close to the UAE. Outbound transactional email (lead notifications) is sent via Resend. The AI assistant talks to Anthropic via their API.

• Anonymous analytics events: 12 months from collection, then auto-purged. • AI message metadata: 12 months from collection, then auto-purged. • Lead records and admin audit logs: kept indefinitely unless you ask us to delete them.

You can ask us at any time to: • See what personal data we hold about you. • Correct any inaccuracies. • Delete your data (right to be forgotten). • Stop using your email for follow-up. Email sales@swyfl.it. We aim to respond within 30 days.

We use one preference cookie (swyfl-locale) to remember your chosen language. The admin dashboard uses one secure session cookie for authenticated staff. We do not set marketing or third-party tracking cookies.

We follow standard practices: HTTPS everywhere, hashed and salted passwords for admin accounts, encrypted secrets at rest, multi-factor authentication for admin access, server-side rate limiting on every public endpoint, content-security-policy headers. We can't guarantee absolute security, but we treat your data as if it were our own.

Our services are not directed at people under the age of 18. We do not knowingly collect personal data from children.

If we update this policy, we'll change the "Last updated" date at the top. Material changes will be highlighted on the site.