1. Introduction
Welcome to Sqwad ("we," "our," or "us"). Sqwad Technologies LLC operates the Sqwad platform, a creator collaboration and content management service for direct-to-consumer and e-commerce brands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, websites, and services (collectively, the "Services").
By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
2. Information We Collect
We may collect the following categories of information:
2.1 Information you provide
- Account and profile data, such as name, email address, company name, role, and password (stored in hashed form).
- Billing and subscription details processed by our payment providers.
- Content you upload or submit through the Services, including briefs, messages, files, and metadata associated with creator collaborations.
- Communications you send to us, such as support requests or feedback.
2.2 Information collected automatically
- Device and log data, including IP address, browser type, operating system, and approximate location derived from IP.
- Usage data, such as pages viewed, features used, referring URLs, and timestamps.
- Cookies and similar technologies as described in our cookie practices (where applicable) and your browser settings.
2.3 Information from third parties
We may receive information from integrations you connect, authentication providers, or partners you authorize, consistent with their terms and your settings.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Services.
- Create and manage your account and authenticate users.
- Process transactions, send administrative messages, and provide customer support.
- Monitor and analyze usage and trends to improve performance and user experience.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations and enforce our agreements.
- Send marketing communications where permitted; you may opt out as described in those messages.
4. How We Share Information
We may share information in these circumstances:
- Service providers. With vendors who perform services on our behalf (e.g., hosting, analytics, email delivery, payments), subject to confidentiality and security obligations.
- Within your workspace. With other users you invite or who belong to the same organization, according to your configuration of the Services.
- Legal and safety. When required by law, legal process, or to protect the rights, property, or safety of Sqwad, our users, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
- With your consent. When you direct us to share information or otherwise agree.
We do not sell your personal information as that term is commonly understood under applicable U.S. state privacy laws.
5. Meta (Facebook) Platform Data
Brands can connect a Meta ad account to Sqwad with Facebook Login so we can show which creator videos drive their sales. When a brand connects:
- What we access. With the ads_read and business_management permissions, we read the list of ad accounts the person can access, plus ad-level performance for the account they choose: ad IDs, ad names, spend, impressions, clicks, purchases and purchase value. We also store the person's Meta user ID and name to show who connected.
- How we use it. Only to match ads to the creator videos they use (by the code in the ad name) and to show that brand its spend, sales, ROAS and creator commission. We never create, edit, pause or pay for ads, and we never post on anyone's behalf.
- Who sees it. The brand's own admins. A creator sees the sales attributed to their own videos. We do not sell Meta data, share it with other brands, or use it for advertising or profiling.
- Storage and security. Access tokens are encrypted at rest and only read by our servers. Performance data is refreshed about once a day.
- Deleting it. A brand can disconnect Meta from the Ads page at any time, which deletes the token and all synced ad data immediately. Anyone can also remove Sqwad in Facebook under Settings, then Business Integrations (or Apps and Websites), which triggers the same deletion. See our data deletion instructions.
6. Shopify Store Data
Brands can connect a Shopify store so Sqwad can show their real products to creators and send approved creators free samples as Shopify orders.
- What we access. When a brand connects its Shopify store, we read its product catalog (titles, photos, variants), and read orders that Sqwad created for that brand so we can show their fulfillment and tracking status.
- What we create. When a brand chooses to send a creator a free sample, we create one order in the brand's store containing the product and variant the creator picked, the creator's name, email and shipping address, at 100% off. We do not create any other orders, change products, or touch payments.
- Customer data. The only personal data involved is the creator's own name, email and shipping address, which the creator gave us when applying. We do not read, copy or store the brand's Shopify customer records. We keep only the Shopify order ID and its tracking number on the creator's application.
- Storage and security. Shopify access tokens are encrypted at rest and only read by our servers.
- Deleting it. A brand can disconnect Shopify from the Store sales page, or uninstall Sqwad under Settings, then Apps in Shopify. Either deletes our access immediately, and we honor Shopify's customer and shop data deletion requests.
7. Data Retention
We keep information only as long as needed for the purposes in this policy. Specifically: denied creator applications are deleted 12 months after the decision; expired or used admin invites are deleted after 30 days; Shopify and Meta credentials and synced data are deleted as soon as a brand disconnects or uninstalls; and a brand's data is deleted within 30 days of the brand closing its account or asking us to. These deletions run automatically each day. We may keep data longer only where the law requires it.
8. Security
We implement technical and organizational measures designed to protect your information, described in our Security and Incident Response policy. No method of transmission or storage is completely secure; we encourage you to use strong passwords and protect your account credentials.
9. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information, or to object to processing or request portability. You may also have the right to lodge a complaint with a data protection authority. To exercise applicable rights, contact us using the details below. We may need to verify your identity before fulfilling your request.
10. Children's Privacy
The Services are not directed to children under 13 (or the age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.
11. International Transfers
If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate. We take steps designed to ensure appropriate safeguards where required by law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. If changes are material, we will provide additional notice as appropriate. Your continued use of the Services after the effective date constitutes acceptance of the updated policy, to the extent permitted by law.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact Sqwad Technologies LLC using the support or contact options provided on our website or within the Services.