---
title: "Privacy policy"
description: "What Swoopcut collects when you join the waitlist, order a video or visit the site, why we collect it, who helps us handle it, and how to see or delete it."
url: https://swoopcut.com/privacy
author: Harjot Singh Rana
published: 2026-10-10
modified: 2026-10-17
updated: 17 October 2026
---

# Privacy policy

Last updated: 17 October 2026

What Swoopcut collects when you join the waitlist, order a video or visit the site, why we collect it, who helps us handle it, and how to see or delete it.

> **The short version**
>
> - We collect what you give us: your email, your app's link, your test login and the details of your order.
> - We use it to reply to you, make your video and get paid. We don't sell it.
> - Dodo Payments takes your card details. We never see them.
> - Use a demo account with sample data. We stop using your test login when we deliver.
> - We delete test logins within 30 days of delivery and keep recordings for up to 12 months.
> - Email hello@swoopcut.com to see, fix or delete what we hold about you.

## Who we are

Swoopcut is run by Harjot Singh Rana, an individual based in New Delhi, India. "We", "us" and "our" in this policy mean Swoopcut. We decide what personal data we collect and why, so under data protection law we are the data controller (a "Data Fiduciary" under India's DPDP Act).

Contact: [hello@swoopcut.com](mailto:hello@swoopcut.com). For billing, you can also write to [billing@swoopcut.com](mailto:billing@swoopcut.com), and for help with an order, [support@swoopcut.com](mailto:support@swoopcut.com).

This policy covers swoopcut.com, our waitlist, and the videos we make for you. Our [terms](/terms) and [refund policy](/refunds) explain the rest.

## What we collect

### When you join the waitlist

- Your email address.
- If you choose to add them: your app's link, where you plan to launch, when, which plan interests you, and any note you write.
- Which form you used, the campaign tags in the link you arrived on (UTM tags, if any), and the site that sent you (the referrer).

### When you order a video

- Your name and email, and the one-line brief for your video.
- The link to your app and the demo or test login you give us.
- The recordings and edits we make of your app, the previews we send and the final videos.
- Payment status from Dodo Payments: whether you paid, the plan, the amount and the date. Dodo handles your card details. We never see or store them.
- Our emails with you about the order.

### When you visit the site

- Our host, Vercel, keeps standard server logs to run and protect the site. These can include your IP address, browser type and the pages you asked for.
- When we turn on analytics, PostHog records page views, clicks, scroll depth (heatmaps) and, for some visits, a replay of how the page was used. Anything you type into a form field is masked and never recorded. See [Cookies and analytics](#cookies-and-analytics).

### When you email us

We keep your email address and what you write, so we can reply and keep a record of what we agreed.

We don't ask for sensitive personal data, such as health, financial or government ID details. Please don't send it to us.

## Test logins and your app

To film your app we need to sign in to it. Here is how we handle that.

- We ask for a demo or test account with sample data, never real customer data. If your app can't be shown without real people's data, we can't take the order.
- We use your test login only to sign in and record the flow in your brief. We don't open other parts of your app or try to reach anything beyond the brief.
- We never get around bot protection, captchas or security checks. If one blocks us, we ask you to help.
- Only the person making your video can see your test login. We don't share it with anyone.
- We stop using your test login when we deliver your video, and we delete it from our notes within 30 days of delivery.
- Please change the password or delete the test account after delivery. That is the surest way to end our access.

If a recording shows personal data by mistake, we blur it or record again, and we don't keep the unblurred copy longer than we need to fix it.

## Why we use it, and our legal basis

| What we do | Why | Legal basis (GDPR and UK GDPR) |
|---|---|---|
| Keep your waitlist entry and email you when booking opens | You asked us to | Your consent |
| Record your app, make your video, take payment, deliver and support it | To do what you ordered | Contract |
| Keep invoices and payment records | Tax and accounting law | Legal obligation |
| Keep the site safe, stop spam and abuse | To protect you and us | Legitimate interests |
| Measure how people use the site (when analytics is on) | To make the site clearer | Legitimate interests |

Under India's DPDP Act, we process your data with your consent, which you give when you join the waitlist or place an order, or for a legitimate use the Act allows, such as a purpose you gave us the data for.

You can withdraw consent at any time by emailing us or by using the unsubscribe link in our emails. That doesn't affect anything we did before you withdrew it.

We don't use your data for automated decisions that have legal or similar effects on you, and we don't sell it.

## Who we share it with

We share personal data only with the service providers that help us run Swoopcut, and only what each one needs.

| Provider | What it does for us | Where |
|---|---|---|
| Vercel | Hosts the site and the waitlist form | United States and global edge network |
| Turso | Stores the waitlist database | United States (AWS us-east-1) |
| Dodo Payments | Merchant of record: takes payment, handles tax, issues invoices and refunds | See Dodo's privacy policy |
| Google Workspace | Our email at swoopcut.com | Google's data centres |
| Resend | Sends emails from the site, such as confirmations (coming soon) | United States |
| PostHog | Site analytics, heatmaps and session replay (when enabled) | United States |

Dodo Payments is the merchant of record for your purchase. That means Dodo sells the order to you on our behalf, takes the payment and handles sales tax or VAT. Dodo's own privacy policy covers the data you give it at checkout.

We may also share data if the law requires it, to protect our rights or someone's safety, or with a buyer if Swoopcut is ever sold. In that last case, we'll tell you first.

## Where your data is stored

We are based in India, and our providers store data mainly in the United States. If you are in the EU or the UK, your data leaves your country. Where the law requires it, we rely on our providers' standard contractual clauses or a similar safeguard for those transfers.

## How long we keep it

- **Waitlist entries:** until you ask us to remove you, or until we close the waitlist.
- **Test logins:** we stop using them at delivery and delete them from our notes within 30 days of delivery.
- **Recordings and project files:** up to 12 months after your last delivery, so we can make fixes and re-records. Ask and we delete them sooner.
- **Final videos:** we keep a copy for the same 12 months in case you lose yours.
- **Emails about an order:** as long as needed to support you and keep a record of what we agreed.
- **Invoices and payment records:** as long as tax and accounting law requires.

## Cookies and analytics

Today the site sets no cookies for tracking or advertising.

When we turn on PostHog, it runs without cookies. It keeps a visit ID in your browser's memory for one visit only, and forgets it when you close the tab. It records page views, clicks and heatmaps and, for some visits, a replay of how the page was used, with everything typed into fields masked.

If you start a booking or join the list, your browser keeps your email and what you typed in the form for up to 30 days, so a reload doesn't lose it. It stays on your device and is only sent to us when you press send. "Change email" or clearing your browser's site data removes it.

If we ever add cookies that need your consent, we'll ask first with a clear choice, and we'll update this page.

## How we protect it

- The site and the waitlist form use HTTPS.
- Only Harjot can see waitlist entries, order details and test logins.
- Accounts with our providers use strong passwords and two-step sign-in.
- We collect as little as we can, and delete what we no longer need.

No system is perfectly safe. If a breach affects your data, we'll tell you and the relevant authority as the law requires.

## Your rights

Wherever you live, you can email [hello@swoopcut.com](mailto:hello@swoopcut.com) to ask us to:

- tell you what personal data we hold about you and what we do with it
- correct, complete or update it
- delete it
- stop emailing you

We reply within 30 days. We may ask you to confirm you own the email address before we act.

### In India (DPDP Act 2023)

You have the rights above, plus the right to raise a grievance with us and to nominate someone to act for you if you die or can't act yourself. If you're not happy with our answer to a grievance, you can complain to the Data Protection Board of India.

### In the EU and the UK (GDPR and UK GDPR)

You also have the right to object to processing based on legitimate interests, to restrict processing, and to get your data in a portable format. You can complain to your local data protection authority. In the UK, that is the Information Commissioner's Office (ICO).

### In California (CCPA)

We collect identifiers (such as your email), commercial information (your orders) and, when analytics is on, website activity. We use them only for the purposes in this policy. You have the right to know, delete and correct your personal information. We don't sell or share personal information for cross-context behavioural advertising, and we won't treat you differently for using your rights.

## Children

Swoopcut is for businesses and people building apps. It isn't meant for anyone under 18, and we don't knowingly collect data from children. If you think a child has given us data, email us and we'll delete it.

## Changes to this policy

We may update this policy as Swoopcut changes, for example when we turn on analytics or start sending emails from the site. The date at the top shows the latest version. For material changes, we'll email the waitlist and our customers before they take effect.

## Contact and complaints

Questions, requests or complaints about your data go to Harjot Singh Rana at [hello@swoopcut.com](mailto:hello@swoopcut.com). He handles grievances for Swoopcut and replies within 30 days.