Contact: hello@tryswell.co This Privacy Policy was substantively revised July 14, 2026, to reflect current architecture; July 27, 2026, to clarify how audio from other call participants is handled; August 9, 2026, to reflect the flash-only coaching product and updated AI subprocessors (including Google Gemini for backend coverage analysis); and August 20, 2026, to reflect the decide→author flash pipeline (Gemini decides silence vs flash; Anthropic Haiku authors tip text). Our Terms of Service were revised July 27, 2026, for participant-audio handling. San Gregorio Labs Inc. (“Swell,” “we,” “us,” or “our”) operates the Swell macOS application and related services available at tryswell.co (the “Service”). This Privacy Policy describes how we collect, use, disclose, and retain information when you use the Service. By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
1. Information we collect
Account information
When you sign in with Google via WorkOS, we receive your email address and a user identifier from our authentication provider. We do not collect or store your password directly. The sign-in screen links to our Terms of Service and Privacy Policy before authentication.Audio and transcription data
When you start a coaching session, the app captures microphone and system audio only after you grant macOS permissions. Audio is streamed in real time to Swell’s coaching relay over an encrypted WebSocket. Our servers send audio to our speech-to-text provider (Deepgram) for transcription. The Mac app does not connect directly to Deepgram or hold speech-to-text credentials. We do not store raw audio recordings. This audio includes the voices of other call participants (for example, sales prospects), not just the Swell user’s. We process that audio only to power real-time coaching and do not use it to train public AI models. Providing notice to other call participants and obtaining any consent required to record and analyze their voices is the responsibility of the Swell user conducting the call. See Terms of Service, Section 5 for details.Transcript and coaching data
We store transcript text, flash tip history, backend discovery-coverage checkpoints, session identifiers, and related metadata to provide the Service. This content is automatically deleted after 24 hours unless we notify you of a different retention period.Profile preferences
You may optionally save preferences such as sales framework settings associated with your account.Diagnostic and technical data
- Crash and error reports: We collect diagnostics via Sentry from the Mac app and from Swell’s web API and coaching relay. We configure the SDK with default PII collection disabled and scrub sensitive fields before upload.
- Logs and metadata: We collect timestamps, app version, API request metadata, and similar technical data for security, debugging, and rate limiting.
2. How we use information
We use information to:- Provide real-time transcription and coaching
- Authenticate you and maintain your account
- Operate, secure, and improve the Service
- Enforce rate limits and prevent abuse
- Respond to support and privacy requests
- Comply with legal obligations
AI processing
Coaching features use third-party AI services to analyze call audio or transcript text and generate real-time flash tips. We use these services to provide the Service, not to build public models from your call content. We do not use your call transcripts to train Swell’s own models. The server-side AI steps differ:- Flash tip decide/author and ledger tick (Google Gemini and Anthropic Claude, via Vercel AI Gateway). Gemini decides silence vs flash and does not write tip copy, and also runs periodic ledger-tick updates. Anthropic Haiku authors the short flash tip only when decide said flash. Every Gateway request sets
zeroDataRetention: true(enforced in application code). Flash tips may appear briefly in the Mac app. - Moment detection (OpenAI Realtime). Connects directly to the OpenAI Realtime API (not via AI Gateway). Per OpenAI’s API data controls, data sent to the API, including
/v1/realtime, is not used to train or improve OpenAI models. On Swell’s standard account (no Zero Data Retention approval), OpenAI may retain Realtime session content in abuse-monitoring logs for up to 30 days; application state is not persisted by OpenAI for this endpoint. Application code setstracing: nullto exclude Realtime sessions from the OpenAI Traces dashboard; this does not disable abuse-monitoring log retention.
3. How we share information
We share information with service providers that help us operate the Service:
See our Subprocessor list for security documentation links.
We may also disclose information:
- To comply with law, regulation, legal process, or governmental request
- To protect the rights, safety, and security of Swell, our users, or others
- In connection with a merger, acquisition, or sale of assets (with notice where required)
4. Data retention
You may request deletion of account data by contacting hello@tryswell.co.
5. Security
We implement technical and organizational measures including:- TLS encryption for data in transit
- Authenticated API access (WorkOS JWT)
- User-scoped database reads bound to the authenticated JWT
- Server-only database writes gated by per-service sync secrets
- Third-party AI and speech-to-text credentials stored server-side only
- Automatic transcript purging (hourly cron; default 24 hours)
- Keychain storage for local auth tokens
- Production logs avoid transcript text, tokens, and full user identifiers
Security incident notification
If we confirm unauthorized access to personal information or call content involving Swell systems, we will notify affected customers without undue delay and, where required by law, within 72 hours of confirmation. Notifications will describe what happened, what data was involved, and steps we are taking. Contact hello@tryswell.co with security concerns.6. Your choices and rights
Permissions
You can revoke microphone or system audio access in System Settings, Privacy and Security, on your Mac. Revoking permissions prevents coaching sessions from functioning.Access, correction, and deletion
Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise these rights, email hello@tryswell.co from the address associated with your account. We will respond within 30 days.California residents (CCPA / CPRA)
We do not sell personal information. California residents may request disclosure of categories collected, deletion, or correction as described above.EEA / UK residents (GDPR)
Legal bases for processing include:- Contract: providing the Service you requested
- Legitimate interests: security, fraud prevention, and product improvement
- Consent: macOS audio permissions (where applicable)