Last updated [effective date]
1. Who we are
[Company legal name] runs Sway and is responsible for your personal data. Contact: [legal@your-domain]. [Representative / data protection officer, if required.]
2. What we take from X
When you connect X we read, with read-only access:
- your X user id, handle, display name and avatar URL (and your public bio for your profile);
- the public metrics our open scoring model uses: follower count, verified status, account age, and likes, reposts and replies on your recent public posts (the numbers, not the posts).
Your X access token is used only during your session. It lives in our session store, is never written to our database and is deleted when you log out or the session expires.
3. What you create on Sway
Posts and replies, images you upload, likes, reposts, follows, subscriptions, direct messages, room messages, reports and blocks, notifications, task verifications, referrals and your points ledger.
4. Wallets and onchain data
We store the wallet addresses you create or link. Transactions on Robinhood Chain (key trades, claims, stakes, payments) are public and permanent. We mirror them to show prices, holdings and activity. We never receive your wallet keys.
5. How we use your data
To run Sway (profiles, feeds, rooms, holder-only access, messages, notifications), to compute your score, points and tier, to keep Sway safe (moderation, abuse and bot detection, security) and to meet legal obligations. [Legal bases for each purpose.]
6. What is public
Your profile, Sway score, reach value, key market, public posts and replies, and everything onchain. Holder-only and subscriber posts are shown only to holders and subscribers. Direct messages are visible to you and the other person.
7. Who we share it with
Service providers that host and operate Sway for us [list], under contract; authorities when the law requires it. We don’t sell your personal data and we don’t use it for advertising.
8. Cookies and local storage
One session cookie keeps you signed in, and a referral cookie remembers who invited you. Your browser’s local storage keeps your Sway wallet key (if you use one) and small preferences. No advertising trackers.
9. Download and delete your data
In Settings you can download everything we hold about you as one JSON file (profile, posts, messages you sent, notifications, points ledger, wallets and trades), and delete your account.
Deleting your account removes your profile details, the text and images of your posts, your direct messages, likes, reposts, follows, subscriptions, blocks, the reports you filed, your notifications and uploads, and signs you out everywhere. What stays: onchain records we can’t erase (your key market, trades, holdings, claims and stakes, shown under “Deleted account”), the wallet links that tie your market to its wallet, and your points ledger as an accounting record. Signing in with the same X account later starts a fresh profile.
10. Retention and security
We keep your data while your account exists and delete it as described above when you delete your account, except where the law requires us to keep it longer. [Backup retention period.] We protect it with access controls, encryption in transit and least-privilege access.
11. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or port your data and to object to processing, and to complain to your data protection authority. Write to [legal@your-domain]. [International transfers.]
12. Children and changes
Sway is not for anyone under 18. We’ll show the date above when this policy changes and tell you in the app about material changes.