Privacy Policy

This policy describes how Swaddra ("we", "us") handles personal information for two groups of users:

• Sellers — food businesses who use Swaddra to take orders
• Buyers — customers who place orders through a Seller's store page

Sellers are independent operators. They are responsible for how they handle the information of their own Buyers outside of Swaddra. This policy only covers the data we collect and process inside the Swaddra platform.

From Sellers: name, email, business name, business address, phone, optional logo/photos, and your Stripe account ID if you connect one. We never see or store card numbers.

From Buyers: name, contact info, delivery address (if applicable), and the contents of any order placed through a Seller's store page on Swaddra. Buyer card details are handled directly by Stripe — we never see or store them.

At signup we also record the IP address you connected from, alongside the timestamp and version of the Terms of Service you accepted. This consent record is kept for the life of your account as evidence that you agreed to our terms.

We use this data to operate the platform: deliver orders to the correct Seller, send order notifications, process Swaddra subscription payments, show analytics to the Seller, secure the service, and respond to support requests. We do not sell your data and we do not use Buyer data for our own marketing.

We use a small number of vendors to run Swaddra. They process data on our behalf and only see what they need to do their job:

• Stripe — payment processing for subscriptions and Buyer card payments
• Resend — sending transactional emails
• Amazon Web Services — hosting and image storage
• Hostinger — server infrastructure
• PostHog — product analytics; data is anonymous on the public marketing site and storefront, tied to a Seller account ID on the dashboard
• Sentry — error monitoring; configured not to capture personally identifiable information

We do not sell, rent, or trade personal information to third parties for marketing.

Personal data is stored on servers located in Canada. Some vendors listed above process data in other countries — notably the United States for Stripe, Resend, PostHog, and Sentry. We rely on each vendor's data-processing agreement and security certifications to protect data in transit and at rest. By using Swaddra you consent to these transfers.

We keep account data while your account is active. Order data is retained indefinitely so Sellers and Buyers have a record of past transactions. Consent records (including IP) are retained for the life of your account as evidence of agreement. After account deletion, we keep the minimum necessary for legal, tax, and accounting obligations (typically 6–7 years in Canada).

Under applicable Canadian privacy law (PIPEDA, Quebec Law 25) and similar laws, you can:

• Access a copy of the personal information we hold about you
• Correct inaccurate information
• Request deletion (subject to legal retention requirements)
• Withdraw consent for non-essential processing
• Request that we transfer your data in a portable format (Quebec residents)

Most account information can be edited from your settings page. For other requests email hello@swaddra.com or our Privacy Officer directly.

We use a small number of strictly necessary cookies to keep you signed in and remember your preferences (such as language). We do not use third-party advertising cookies.

We use standard security practices: HTTPS for all traffic, hashed passwords (bcrypt), restricted database access, and Stripe's vaulted payment handling for card data. No system is perfectly secure — please use a strong, unique password and report any suspected security issue to us right away.

Swaddra is not directed at minors and we do not knowingly collect personal information from minors. If you believe a minor has provided information to us, contact us and we will delete it.

If we change this policy in a meaningful way we will notify Sellers by email. Smaller updates will be posted here with a new "Last updated" date.

Questions about your data? Email us at hello@swaddra.com.