In one line

Everything you keep in Swops is stored in the EU. Some of it travels to providers in the United States to be processed, for AI and email, under EU safeguards.

What goes to the United States

These jobs are done by providers in the United States:

  • AI reading of card photos, and drafting your company context from your website.
  • AI research of businesses: the company name, website, country and your company context.
  • Email delivery: sign-in codes, invitations and the follow-up emails you send.

Payments are handled by Stripe and Link, which sell Swops plans as merchant of record. They process your payment details as independent controllers under their own privacy policies. Swops never receives your full card or bank details.

Transfers to the United States

Where a provider processes data outside the European Economic Area, Swops relies on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, where the provider is certified under it) or on the European Commission’s standard contractual clauses. Each provider is bound by contract to data protection obligations in line with Article 28 of the GDPR.

What each AI task receives is set out in What the AI sees.

How your data is protected

  • Encrypted on the way between the app, Swops and its providers, and encrypted where it is stored in Ireland.
  • Card photos are private. Only members of the workspace can see them. See Card photos: what is kept and where.
  • Workspaces are kept apart. Your personal space and each company workspace never share contacts, notes, research, company context or allowance.
  • Staff access is limited to authorised people.

Cookies

Swops uses only the cookies and browser storage it needs: to keep you signed in, to remember settings such as your current workspace, and to protect the app against attacks. Nothing is used for advertising. When you open the checkout, Stripe sets the cookies it needs to take the payment safely. The website (not the app) uses analytics; visitors from Europe are asked first. See Your data and your rights.

Which providers?

Swops lists its providers by what they do and where. For the current list by name, contact us. You can also ask to be told by email about a new or replaced provider at least 14 days before it starts processing the data in your workspaces.

  • Privacy Notice: what Swops does with your account data as controller.
  • Data Processing Terms: how Swops processes the contacts you add, as your processor, with the security measures and the list of provider functions.