Privacy Policy
Effective date: March 9, 2026
SwellFrame LLC ("SwellFrame," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data when you use the SwellFrame website, customer portal, connected e-ink devices, and related services (collectively, the "Service").
1. Information We Collect
Account Information
When you create an account, we collect your first name, last name, username, email address, preferred time zone, and a hashed version of your password.
Billing & Shipping Information
If you purchase a device or subscribe to premium features, we collect billing and shipping addresses. Payment details (credit card numbers, etc.) are processed directly by Stripe and are never stored on our servers.
Device Information
When you register and use a SwellFrame device, we collect the device identifier, configuration settings (spot selections, slide modes, rotation interval), check-in timestamps, firmware version, and operational telemetry (refresh results, errors).
Usage Data
We collect server logs including request timestamps, endpoints accessed, response status codes, and request latency. We do not use third-party analytics trackers or advertising cookies on our website.
Forecast Data
Location coordinates for your selected surf spots are used to retrieve forecast data from third-party providers. We cache forecast data temporarily to reduce API calls and improve performance.
2. How We Use Your Information
- Provide the Service: Deliver forecasts, render images, manage device configurations, and process orders.
- Account Management: Authenticate your identity, maintain your account, and provide customer support.
- Communications: Send transactional emails (order confirmations, account notifications). If you opted in, send product updates and release announcements.
- Improve the Service: Analyze usage patterns and device telemetry to fix issues and improve forecast quality.
- Legal Compliance: Comply with applicable laws and respond to legal requests.
3. Third-Party Services
We share information with the following third-party services as necessary to operate the Service:
- Stripe: Processes payments. Receives your billing information and email. See Stripe's Privacy Policy.
- Stormglass: Provides surf and weather forecast data. Receives geographic coordinates (latitude/longitude) for your selected spots. See Stormglass Privacy Policy.
- Resend (if opted in): Manages email communications. Receives your email address and first name if you opted into product updates.
- Microsoft Azure: Hosts our infrastructure. Your data is stored in Azure data centers in the United States.
We do not sell your personal information to third parties.
4. Data Storage & Retention
Account data is retained for as long as your account is active. Device telemetry and check-in logs are retained for up to 30 days. Forecast cache data is retained for up to 12 hours. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
5. Data Security
We implement reasonable security measures to protect your data, including:
- Passwords are hashed using PBKDF2-SHA256 with 120,000 iterations and a unique salt.
- Session tokens are signed with HMAC-SHA256 and expire after 8 hours.
- Device credentials are stored as SHA-256 hashes.
- All data in transit is encrypted via HTTPS/TLS.
No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Your Rights & Choices
- Access & Update: You can view and update your account information through the customer portal.
- Delete: You may request deletion of your account and personal data by contacting us.
- Unsubscribe: You can opt out of marketing emails at any time using the unsubscribe link in those emails or by contacting us.
- Data Export: You may request a copy of your personal data by contacting us.
7. Cookies & Tracking
The SwellFrame website uses localStorage to maintain your session state (session token and account ID). We do not use tracking cookies, third-party analytics, or advertising pixels.
8. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data, please contact us:
- Email: hello@swellframe.co
- Website: swellframe.co