swailio
Create my video

Privacy Policy

Last updated: 27 October 2026

This translation is provided for convenience. The French version is the only legally binding version and prevails in case of discrepancy.

This policy explains what personal data we process when you use the swailio.io website and the Swailio application, for what purpose, with which providers, and how to exercise your rights. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

Controller
HFCS, SASU with a share capital of €3,000, RCS Bobigny 999 538 184
Address
50 rue Mathieu, 93400 Saint-Ouen-sur-Seine, France
Personal data contact
support@swailio.io

2. Data processed, purposes and legal bases

Request for a beta invitation

Data
Email address, page from which the request was made, date
Legal basis
Your consent (you fill in the form)
Retention period
Until the invitation is sent, then 3 years if you do not respond

Creation and management of your account

Data
Name, email address, password (stored encrypted), plan, credits
Legal basis
Performance of the contract
Retention period
As long as the account is active, then deletion within 30 days after its closure

Creation of your videos

Data
Brief, answers to questions, website address, screenshots, logos, documents, exchanges with the assistant, generated videos
Legal basis
Performance of the contract
Retention period
As long as the account is active or until you delete the project

Subscription, payment and invoicing

Data
Name or company name, billing address, VAT number, plan, payment history and invoices (bank card data is collected and stored by Stripe, never by Swailio)
Legal basis
Performance of the contract; legal obligation (accounting)
Retention period
Duration of the subscription, then 10 years for invoices and accounting records

Feedback on videos and service improvement

Data
Ratings and comments left on videos, edit history
Legal basis
Legitimate interest (improving the quality of the videos)
Retention period
As long as the account is active

Service-related emails and information about Swailio

Data
Email address, first name
Legal basis
Performance of the contract; legitimate interest for product information (you may unsubscribe at any time)
Retention period
Until the account is closed or you unsubscribe

Security and abuse prevention

Data
Technical logs (date, IP address, actions performed)
Legal basis
Legitimate interest (securing the service)
Retention period
12 months

Support

Data
Your messages and the information needed to respond to you
Legal basis
Legitimate interest; performance of the contract
Retention period
3 years after the last exchange

Data marked as mandatory in the forms is necessary to give you access to the service. We do not sell your data. Only if you accept it in the cookie manager, we share with Meta the information needed to measure the performance of our ads (see “Cookies and trackers”).

3. Video generation by artificial intelligence

To design your videos, Swailio sends the content of your projects (brief, answers, screenshots, public content of your website) to artificial intelligence services: generation of the script and animations, image creation, voice-over, music and sound effects. These services act on our behalf, through their business offerings, for the sole purpose of producing your video.

Swailio does not use your content to train artificial intelligence models. Avoid including in your briefs personal data of third parties or confidential information that is not necessary for the video.

4. Recipients and processors

Your data is accessible only to the Swailio team, to the extent necessary, and to the following providers, which process it on our behalf:

Supabase

Role
Database, accounts and file storage
Location
European Union (Paris)

Amazon Web Services

Role
Video rendering and storage
Location
European Union (Paris)

Lovable

Role
Hosting of the website and application
Location
European Union and United States

Railway

Role
Video generation servers
Location
United States

Anthropic

Role
Script and animation design (AI)
Location
United States

Google (Gemini)

Role
Image generation (AI)
Location
United States

ElevenLabs

Role
Voice-over, music and sound effects (AI)
Location
United States

n8n

Role
Process automation
Location
European Union

Stripe

Role
Payment, subscriptions, invoices and VAT calculation
Location
European Union (Ireland) and United States

Brevo

Role
Email delivery
Location
European Union (France)

Google Fonts

Role
Font display
Location
United States

Axeptio

Role
Collection and storage of your cookie choices
Location
European Union (France)

Google Analytics

Role
Website audience measurement (with your consent)
Location
United States

Microsoft Clarity

Role
Anonymous browsing analysis (with your consent)
Location
United States

Meta (Meta Pixel)

Role
Measuring the performance of our Facebook and Instagram ads (with your consent)
Location
European Union (Ireland) and United States

Where data is transferred outside the European Union, such transfers are governed by the EU–US Data Privacy Framework where the provider participates in it, or by the standard contractual clauses adopted by the European Commission.

We may also disclose data to the authorities where required by law.

5. Security

Communications with Swailio are encrypted (HTTPS), passwords are stored in encrypted form and access to your projects is restricted to your account. The team’s access to data is restricted and reserved for support and maintenance of the service.

6. Your rights

You have the following rights over your data at any time:

  • access and copy;
  • rectification;
  • erasure;
  • restriction of processing;
  • objection, in particular to informational emails;
  • portability of the data you have provided to us;
  • withdrawal of your consent, without affecting processing already carried out;
  • setting guidelines on what happens to your data after your death.

To exercise them, write to support@swailio.io. We will respond within one month. Proof of identity may be requested in case of reasonable doubt.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the CNIL (French data protection authority) (cnil.fr).

7. Cookies and trackers

Some trackers are necessary for the service to function and do not require your consent:

  • the login session to your account;
  • application display preferences;
  • storage of your cookie choices (Axeptio).

Only with your consent, collected through our consent management platform, we also use:

  • Google Analytics, to measure traffic on the public website (pages viewed, origin of visits), with anonymised IP addresses;
  • Microsoft Clarity, to understand how the website and the application are used (journeys, clicks, areas viewed) and to improve Swailio during the beta. Input fields are masked;
  • the Meta Pixel, to measure the performance of our Facebook and Instagram ads: pages viewed, sign-up, first video project, checkout and purchase. These events are also sent to Meta from our servers (Conversions API), with your email address and account ID encrypted (SHA-256 hashing), your IP address and your browser, so that ad blockers do not distort the measurement. Meta Platforms Ireland acts as joint controller for this collection.

Without your consent, these tools are not loaded. Your choices are kept for 6 months and you can change them at any time.

8. Changes

We may update this policy, for example when paid subscriptions open. The date of the last update appears at the top of the page; in the event of a significant change, we will notify you by email. See also the legal notice.