Privacy Policy

• We collect account information, task and usage data, Provider device and telemetry data, and payment and payout information.
• Client prompts, uploaded files, and outputs ("Task Content") are processed on a distributed network of Provider devices to complete tasks.
• We do not currently use Task Content to train, fine-tune, or improve AI models. Any future training contribution feature will require affirmative opt-in.
• Provider reward proofs are anchored to a public blockchain. Blockchain records are public and permanent.
• We do not sell personal information or share it for cross-context behavioral advertising.
• You must be at least 18, or the age of majority where you live if higher, to use the Services.
• Privacy and data-rights requests may be submitted to hello@joinswarm.io.

Account information. Email address, password-related authentication data, account role, two-factor authentication enrollment data, and account settings and status.

Client task data. Task Content and task metadata such as task identifiers, model or lane, routing and validation results, node assignment, token counts, timestamps, and status.

Client billing data. Credit balances, purchase and usage history, transactions, and receipts. When real-money payment processing is available, card details are handled by our third-party payment processor; Swarm does not store full card numbers.

Provider device and telemetry data. Hardware identifier, device name, operating system and version, node software version, capability class, online/offline status, heartbeats, last-seen timestamps, job counts, success rates, and performance metrics while the node application runs.

Provider reward and payout data. Node signing wallet addresses, reward ledger entries, earnings balances, payout history, KYC verification results, verified payout country, and information needed for payments and tax reporting when payouts launch.

Compliance data. Country and region derived from IP, network-risk signals such as VPN, proxy, or hosting indicators, declared residence or business country, and eligibility or compliance status information we receive from payment, payout, and identity-verification partners. Swarm does not itself operate person-level sanctions screening; Stripe, Payoneer, identity/KYC providers, or other payment and payout partners may perform screening required for their services, and Swarm may receive the resulting eligibility or status information from them.

Automatically collected data. IP address, browser type, device identifiers, pages viewed, timestamps, approximate location derived from IP, and strictly necessary browser storage.

• Provide and secure the Services, route tasks, verify results, return outputs, operate dashboards, and maintain reward records.
• Bill Clients and calculate, account for, and pay Provider rewards.
• Address fraud, abuse, and restricted-party risk and comply with legal and tax obligations, relying on eligibility and compliance status information from payment, payout, and identity-verification partners that may perform sanctions or restricted-party screening required for their services.
• Authenticate users, detect fake or duplicate nodes, investigate incidents, and enforce our terms.
• Operate, troubleshoot, and improve network performance and reliability using operational and telemetry data.
• Use Task Content for model training only if a future opt-in feature is offered and you affirmatively enable it.
• Send transactional and security communications.

• We do not sell your personal information.
• We do not share your personal information for cross-context behavioral advertising.
• We do not use Task Content for advertising.
• We do not currently use Task Content to train, fine-tune, or improve AI models.

Current default: no Task Content training. We do not currently use Task Content to train, fine-tune, or improve AI models.

Future opt-in training. If we introduce a training contribution setting, it will be off by default. Task Content will be used for training only after affirmative opt-in, and consent may be withdrawn for future use.

Always excluded. Payment data, KYC data, account credentials, and security secrets are not used for model training.

Operational improvement. We may use task metadata, telemetry, routing outcomes, latency, validation results, and de-identified or aggregated operational data to improve network performance without using Task Content itself.

Retention. Task Content is retained only as long as reasonably necessary to provide the Services, detect abuse, troubleshoot, resolve disputes, and comply with law.

Swarm is a distributed computing platform. When you submit a task, it is routed to one or more third-party Provider devices for execution, and the result is validated and returned to you. Task Content therefore necessarily transits and is processed on hardware that Swarm does not own.

• Providers are contractually prohibited from accessing, using, retaining, or disclosing Task Content except as required for automated execution.
• Task Content is transmitted between Swarm systems and Provider nodes only as needed to execute, validate, and return the assigned task.
• On Provider nodes, Task Content is processed in memory only. The node software does not write Task Content to persistent disk, and Task Content is not retained on the Provider device after the task completes.
• Higher-trust nodes may be subject to additional verification and reliability requirements.

Do not submit information you are not permitted to disclose to third-party processors, and do not include personal or confidential information your task does not need.

Reward proofs, including task identifiers, reward amounts, proof hashes, and the node signing wallet address associated with the proof, are anchored to a public blockchain. Swarm currently uses a test network for this anchoring and will update this policy before a mainnet launch.

Public blockchains are permanent. Anchored records may be correlated with a signing wallet address and potentially with an identity, and cannot be modified or deleted by Swarm or anyone else.

We use first-party browser storage that is strictly necessary to operate the Services, including authentication session tokens and preference values. It is not used for advertising or cross-site tracking.

We honor Global Privacy Control where applicable law gives it effect.

• Providers: Task Content and task metadata necessary to execute Client tasks. Providers do not receive Client account or billing information.
• Clients: task results and task metadata relevant to their own tasks. Clients do not receive Provider account information.
• Service providers: hosting, infrastructure, payments, payouts, identity verification, sanctions screening, security, and support tooling, subject to appropriate contractual restrictions.
• Legal and safety recipients: where required by law or necessary to protect rights, safety, property, or the public.
• Corporate transactions and advisers: as reasonably necessary for financing, reorganization, acquisition, sale, legal, accounting, audit, insurance, or similar purposes.

• Contract: providing the Services, routing tasks, operating dashboards, calculating rewards, and processing payouts.
• Legitimate interests: security, fraud prevention, node/result verification, network performance, and business operations.
• Consent: any future opt-in Task Content training and non-essential cookies or similar technologies.
• Legal obligation: tax reporting, lawful requests, and sanctions-related requirements handled through our payment, payout, and identity-verification partners.

Swarm is based in the United States and processes information there. Because the network is distributed, Task Content may also be processed on Provider devices located in other countries.

Where applicable law requires a transfer mechanism, we use an appropriate lawful safeguard such as applicable Standard Contractual Clauses or another legally recognized mechanism.

• Account information: for the life of the account and afterward as reasonably necessary for security, legal, tax, audit, disputes, and recordkeeping.
• Task Content: only as long as reasonably necessary for service delivery, abuse detection, troubleshooting, disputes, and legal compliance.
• Task metadata, telemetry, and reward records: as reasonably necessary for verification, audit, security, disputes, and legal compliance.
• Billing, payout, tax, and compliance records: as required by applicable law and reasonably necessary for accounting, reporting, compliance, audit, and disputes.
• Blockchain-anchored records: permanent.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of your personal information, and to withdraw consent where processing is based on consent. Applicable US state laws may also provide rights relating to sale, sharing, targeted advertising, or profiling. Swarm does not sell or share personal information for targeted advertising.

How to submit a request. Email hello@joinswarm.io with the subject line "Privacy Request." Please identify the email address associated with your Swarm account and describe the right you want to exercise. Do not send passwords, two-factor authentication codes, private keys, or government identification by ordinary email.

Identity verification. We may take reasonable steps to verify that you are the account holder or an authorized representative before disclosing, correcting, or deleting information. Verification information is used only for handling the request.

Response timing. We aim to complete verified privacy requests within 30 days and will follow any applicable legal deadline. If applicable law permits additional time for a complex request, we will notify you where required.

Limits and exceptions. Some information may need to be retained where required for balances, payment or payout records, tax, fraud prevention, security, legal compliance, disputes, or audit purposes. Public blockchain records are permanent and cannot be altered or deleted by Swarm.

If applicable law gives you a right to appeal a privacy-rights decision, you may request an appeal by replying to our response or emailing hello@joinswarm.io with the subject line "Privacy Appeal."

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted network connections, two-factor authentication, access controls, and device verification or attestation where supported. No system is completely secure.

The Services are for adults. You must be at least 18 years old, or the age of majority in your jurisdiction if higher, to create an account, submit tasks, operate a node, or receive payouts.

Swarm has not currently appointed a representative in the European Union or the United Kingdom. If applicable law requires us to appoint an EU or UK representative, we will make the appointment and update this Privacy Policy with the representative's contact details.

We may update this policy from time to time and will post a new effective date. Material changes will be communicated through the Services or by email where appropriate.

Delusions of Grandeur LLC

1209 Mountain Road Place NE, Suite R, Albuquerque, NM 87110

Email: hello@joinswarm.io