Privacy Policy

Last updated: April 29, 2026

What We Collect

When you use Swurvebot, we collect only what is necessary to provide the service:

Account info — username, email address (optional), and a securely hashed password.
Marketplace connections — seller usernames or profile URLs you provide for the marketplaces you choose to connect. For eBay, we request read-only OAuth access to your inventory under the scopes you explicitly approve.
Discord — if you link Discord, we store your Discord user ID and username for community tier assignment.
Billing — subscription status and Stripe customer ID. We never see or store your credit card number; all payment processing happens on Stripe's servers.
Usage data — feature usage history, notification preferences, and first-party site analytics events such as page views, referral metadata, session activity, and performance signals.

How We Use Your Data

To operate the marketplace tools and analytics features included in your subscription.
To manage your subscription and send transactional emails (verification, account notices).
To sync your Discord role with your subscription tier (if connected).
To measure site traffic, diagnose product performance, and understand conversion funnels inside Swurve.

We do not sell your data. We do not run ads. We use first-party analytics to understand traffic and product performance, and we do not use third-party advertising or tracking pixels.

eBay API Access

If you connect your eBay account, the following applies specifically to data obtained through eBay:

We access your eBay store data only through eBay's official APIs under the OAuth scopes you grant. We never ask for or store your eBay password.
OAuth access tokens are stored server-side, encrypted at rest, and used only to operate features you have enabled (such as syncing your listings and displaying analytics).
Listing data retrieved from eBay is cached on our servers solely to power the features you've enabled. We do not resell, share, or redistribute your eBay listing data to any third party.
You can revoke our access at any time from your eBay account settings (My eBay → Account → Personal information → Connected apps), or by disconnecting eBay from inside Swurvebot. When you revoke access, we delete the associated OAuth tokens immediately and remove cached listing data within 30 days.
We honour eBay's Marketplace Account Deletion / Closure notifications. When eBay notifies us that a user has closed their eBay account, we delete all data associated with that user within the timeframe eBay requires.

Third-Party Services

We share limited data with these services to operate Swurvebot:

Stripe — email and subscription info for payment processing.
Resend — email address for transactional emails (verification, notifications).
Discord — user ID for role assignment (if you link your account).
eBay — OAuth tokens for read-only inventory access (if you connect eBay).

We do not share user data with any other third party.

Cookies

We use two cookies, both strictly functional:

Session cookie — keeps you logged in (HttpOnly, Secure).
CSRF cookie — protects against cross-site request forgery.

We do not use advertising cookies. Our product analytics are first-party and do not rely on third-party analytics cookies or pixels.

Data Security

Passwords are hashed with scrypt. Sessions use HMAC-signed cookies over HTTPS. OAuth tokens are stored server-side, encrypted at rest, and never exposed to the browser. All connections use TLS.

Data Retention & Deletion

Your data is retained as long as your account is active. To request account deletion and removal of all associated data, contact us via Discord or email. We will delete your account and all stored data within 30 days of your request. Disconnecting eBay deletes the associated OAuth tokens immediately and clears cached listing data within 30 days.

Your Rights

You can request a copy of your data or ask us to delete your account at any time. Contact us through our Discord server.

Changes

We may update this policy. Material changes will be announced on our Discord server.