Privacy

This page explains in plain language how SWA handles your information.

What we collect

Your name, work email, company details and the answers you give about your business. Depending on the tools you use, this also includes information you upload or enter, customer and lead details, documents, images, audio, appointment and registration details, and workflow records.

For Facebook, Instagram and Threads, the data available depends on the permissions you approve and the access granted by Meta. It may include connected Page or professional-account identity, platform-scoped user identifiers, public posts and comments, conversations with the connected business, and lead-form details submitted by users. Public buying-interest signals do not by themselves reveal a person's private phone number or email; those contact details must come from an authorised source or be provided by the person.

AI-assisted processing

When you request an AI-assisted feature, the relevant input and selected company knowledge may be sent to the AI service used by that feature to produce a reply, extract information, analyse intent or transcribe audio. For Lead Radar reply suggestions, the current implementation sends the selected post, comment text, comment author name and relevant company knowledge to the Lovable AI Gateway using a Google Gemini model. Generating a suggestion does not by itself send a reply to the customer.

Avoid adding unnecessary sensitive information to AI inputs. AI outputs can be inaccurate: review important facts and any reply requiring human approval. SWA does not use Google API user data to train general-purpose AI models; provider processing is also governed by the relevant service's terms and data-handling arrangements.

How we use it

We use it to operate your workspace, provide the tools you activate, suggest AI opportunities, support sales and customer workflows, prevent abuse and respond to your requests.

Connected social accounts

When you connect Facebook, Instagram, Threads, YouTube or TikTok, we store the account identifiers, encrypted access tokens, permissions you approve and the comments, messages or lead-form submissions needed for the automations you turn on. We do not sell this information or use it for another company's workspace.

Google, YouTube and Calendar data

If you connect YouTube, SWA accesses only the Google account and YouTube channel information required for the features you choose. This can include your channel identity, selected videos, public comment threads, and the ability to post or moderate replies from your authorised channel. SWA uses this data only to provide Lead Radar, comment follow-up and the workflows you activate.

If you connect Google Calendar, SWA uses the approved account identity, calendar list, busy periods and owned calendar events to show availability, avoid booking conflicts and synchronise the appointments you choose. Calendar access and changes depend on the scopes you approve; connecting a calendar does not give other companies access to it.

Google access tokens are encrypted on the server. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. You can disconnect the account in SWA, revoke access in your Google Account security settings, or request deletion at any time.

SWA's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Read Google's policy

Who can see it

Your organisation and authorised SWA staff. Other companies using the platform cannot see your information.

Service providers and international processing

SWA uses Lovable services for the application infrastructure and AI gateway, and Supabase-compatible database, authentication and storage services within the project's Lovable Cloud environment. WhatsApp session services are hosted on Render. The AI gateway can route relevant inputs to model providers, including Google for the Gemini feature described above. Hosting, database and AI providers may use their own subprocessors. The provider chain depends on the feature used; not every provider receives every customer's data.

Depending on the service and its configuration, information may be processed outside Malaysia. We do not represent that all data stays in Malaysia. Lovable's published subprocessor information is available below; it describes Lovable's wider service network, not a statement that every listed provider receives data from SWA. Lovable subprocessor information

Retention and disconnecting accounts

Stored records support the workspace and workflows you choose. Disconnecting a social account removes SWA's stored credential for that connection and stops further use of that connection; it does not automatically erase previously imported CRM records, workflow history or copies already sent to a platform. Request deletion separately if you want those records removed. Records required for billing, security or legal obligations, and backup copies awaiting their normal rotation, may remain after a deletion request; the scope and any exceptions can be explained when your request is processed.

Legal disclosures

Information may need to be disclosed where applicable law or a binding legal order requires it. Contact the privacy contact above with questions about a particular disclosure or data request.

Your choices

You can disconnect a social account, update or export your information, or ask us to delete your account and connected-platform data. See our Data Deletion page or contact SWA on WhatsApp at +60 18-222 8393.

Data deletion instructions · Terms of service

Last updated: 6 October 2026.