Privacy policy

Who we are

DevSwat Inc. ("DevSwat", "we", "us") is an AI and automation agency headquartered in California, USA. You can reach us at info@dev-swat.com.

Scope

This policy applies to the website at dev-swat.com, our client dashboard, our ChatGPT GPTs and plugins, our MCP servers, and any related interactions where we handle your data.

What we collect

• Account data — your email address and, for Google sign-in, your name, Google user id (sub) and profile photo URL.
• Project data — conversations with the assistant, project scopes, add-ons, billing details you enter (name, company, address, phone, tax id), uploaded files and ticket threads.
• Payment metadata — Stripe checkout session ids, payment status, and timestamps. We never store card numbers; those are handled entirely by Stripe.
• Operational logs — HTTP request logs, error traces, deploy metadata.

Why we use it

• To scope, deliver and invoice the projects you request.
• To authenticate you (NextAuth with Google or email magic-link via SendGrid).
• To respond to support tickets and run scheduled calls.
• To improve the assistant and detect abuse.

Who we share it with

We share only the minimum necessary with sub-processors that help us operate the service:

• Vercel (hosting)
• Supabase (database)
• Stripe (payments)
• OpenAI (LLM inference for the assistant)
• SendGrid (transactional email)
• Google (OAuth sign-in only)

We do not sell your personal data. We do not use your project conversations to train public models.

Access via ChatGPT / MCP

When you connect DevSwat to ChatGPT or another agent via our ChatGPT GPTs or MCP connectors, the connecting agent can act on your behalf for the scopes you approved ("read" for the public connector, "admin" only for allow-listed administrators). We log those API calls and tie them to the user who approved them.

Retention

Project and ticket data is retained for the life of your account and for a reasonable period afterwards for legal, accounting and dispute-resolution reasons. You can ask us to delete your account and personal data at any time by emailing info@dev-swat.com.

Your rights

Depending on your jurisdiction you have rights to access, correct, port or delete your personal data, and to object to or restrict processing. Contact us at info@dev-swat.com to exercise them.

Security

Data is transported over TLS and stored on Supabase Postgres with row-level security enabled on every table; anonymous database access is revoked. Admin operations require either an OAuth 2.1 access token with admin scope (only granted to allow-listed administrators) or a server-side bearer token held in platform secrets.

Changes

We may update this policy from time to time. The "last updated" date at the top reflects the most recent material change.

Contact

Questions, requests or complaints: info@dev-swat.com.