Privacy policy
Not yet reviewed by a lawyer. This describes what the site does today, accurately, but it has not yet been checked against every law that may apply to you.
This policy explains what SagSwell collects and why. The operator of SagSwell is responsible for the personal data described here. You can reach us at sagswell.app@gmail.com.
The short version
- Your waveforms are analysed in your browser. If you are not signed in, nothing is kept or uploaded: the files are gone when you close or refresh the page. If you are signed in, the files you add are kept in your account so they open on any computer, until you delete them. A file is also sent if you press “send this file” to report a reading problem.
- We keep the minimum needed to sign you in, bill you, and hold the files you add while signed in.
- No advertising, no ad trackers, no selling or renting of your data.
What we collect, and why
| What | Why |
|---|---|
| Your name, email address and profile picture, from Google when you sign in with Google | To create your account and show who is signed in |
| Sign-in cookies: a session cookie, and short-lived ones used during sign-in | To keep you signed in and to protect sign-in against forgery. No tracking or advertising cookies. |
| Where you first came from: one first-party cookie, kept for up to 30 days, holding the web address of the page that linked to us (without its query string), any campaign tag in the link (utm_source, utm_medium, utm_campaign), the first page you opened here, and when. It is read only if you create an account, and then stored with it. | To know which sites, posts and search engines bring people who find the tool useful. It is never shared, sold or used for advertising, and no third-party analytics script runs on this site. |
| Your plan, your Stripe customer and subscription identifiers, and the date your paid period ends | To know which features you have paid for |
| Record files (.cfg and .dat) you add while signed in, and the folders you put them in | So that you can open them from any computer. Kept until you delete the record or your account. |
| Sites, events and notes you create | So you can organise records and share notes with your team |
| Team membership and invitations: the email address of someone you invite, and which team they belong to | To give the seats you pay for to the people you choose |
| The format of each record file the reader opens — recorder vendor, COMTRADE revision, sample rate, channel counts, duration, and whether it read correctly. Never the station name, device name, file name or any sample. | To find recorder types the reader handles badly, and fix them |
| How many records and events you analyse, as counts | To apply the free plan’s limit, and to see how the tool is used |
| Which account emails we have sent you (a welcome, one short feedback question after a week, a notice before your Pro trial ends and one when it has ended), and whether you asked us to stop; and, only if you said yes, that you want product news and when you said so | So each is sent once and never after you unsubscribe. Every one has an unsubscribe link, and a reply reaches a person. News is sent only to people who opted in, at most once a month, and stops when you ask. |
| A file you send with “this file did not read correctly” | To fix the reader. Only when you press the button, after the consent text is shown in full; kept until the fix is done, then deleted. |
Your browser keeps only small preferences locally (for example your chart settings and which records were open, the latter only until you close the tab). No record, folder name or waveform is stored on your computer: while you are signed in they live in your account, and when you are not they are not kept at all.
The legal basis for this is performing our contract with you (running your account and your subscription), our legitimate interest in keeping the reader working, and your consent where we ask for it (storing a record, sending a file).
Who else handles it
We use a small number of service providers, each only for the job listed:
| Railway | Hosts the site and its database (region: Singapore) |
|---|---|
| Stripe | Takes payments and holds your card and billing details. We never see your card number. |
| Signs you in, if you choose “Continue with Google” | |
| Resend | Delivers the emails we send you: your address, the subject and the message |
| Cloudflare | Runs the domain name, and stores the record files you add while signed in |
| Anthropic | Only if you use the written-assessment feature: the derived numbers from a record are sent to draft text. No waveform and no file is sent. |
Some of these providers are outside your country, so your data may be processed in the United States, Singapore or elsewhere. They are bound by their own terms to protect it. We do not sell, rent or trade personal data, and we do not share it for advertising.
How long we keep it
- Account and stored records: while your account exists.
- Billing records: as long as tax and accounting law requires, even after the account is closed.
- Files sent to report a problem: until the problem is fixed, then deleted.
- Sessions expire after 30 days of not signing in.
Your rights
You can ask to see the personal data we hold about you, correct it, receive a copy, or have it deleted, and you can object to or ask us to limit how we use it. You can remove any stored record yourself in the app, at any time. For anything else, including closing your account and deleting everything in it, write to sagswell.app@gmail.com; we answer within 30 days. If you are unhappy with our answer you may complain to the data-protection authority where you live.
Security
The site is served only over HTTPS. Stored records are private to your account (or your team) and every request for one is checked against who is asking. No system is perfectly secure; if we learn of a breach that affects your data we will tell you and the relevant authority as the law requires.
Shared folders and workspaces
If you share a folder with someone’s email address, we store that address against the folder, and whoever signs in with it can see the folder, its records and the files kept with them. The records they add to it are visible to you and to everyone else it is shared with. Removing an address ends their access; nothing they added is deleted.
If you are a member of a team on the Team plan, the sites, filed records, events and notes you create are visible to every other member of that team, and so is any record file you chose to store in the account. The team’s owner decides who is a member. When a Team subscription ends, each member sees only their own filings again; nothing is deleted. If you leave a team, what you filed stays in your account and is no longer visible to the others.
Children
SagSwell is a professional tool and is not intended for anyone under 18.
Changes
When this policy changes we will post the new version here with a new date, and tell account holders by email if the change is significant.