SwagOnIt

Privacy PolicyEffective Date: February 19, 2026 | Last Updated: February 19, 2026

SwagOnIt, Inc. ("SwagOnIt," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the SwagOnIt platform, including our website at swagonit.com, brand.swagonit.com, mobile applications, and all related services (collectively, the "Platform").By using the Platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Platform.

Table of Contents1. Information We Collect2. How We Use Your Information3. How We Share Your Information4. Data Retention5. Data Security6. Your Rights and Choices7. California Privacy Rights (CCPA/CPRA)8. European Privacy Rights (GDPR)9. Children's Privacy10. AI and Automated Decision-Making11. Third-Party Links and Services12. Changes to This Privacy Policy13. Contact Us

1. Information We Collect1.1 Information You Provide DirectlyAccount Information

•Email address (required for login)

•First name and last name

•Display name

•Profile image or avatar (optional)

•Phone number (optional)

•Bio (optional)

•Your stated goal on the Platform (e.g., creating events or sponsoring events)

Creator Profile Information

•Creator or organization name

•Description and bio

•Website URL

•Social media links (e.g., Instagram, Twitter, TikTok)

•Event type preferences

•Vibe tags (style or personality descriptors)

•Skill tags (areas of expertise)

•Event photos

Brand Profile Information

•Company name and brand name

•Brand description

•Logo and banner images

•Website URL

•Social media links (e.g., LinkedIn, Twitter, Instagram)

•Industry classification

•Contact person details (name, email, phone, job title, preferred contact method)

•Sponsorship preferences (cash offerings, product sampling)

•Target audience details (age group, gender, income level, customer description)

•Target event types, brand vibe tags, and sponsorship goals

Event Information

•Event name, description, date, and location

•Expected attendee count

•Event photos and media

•Sponsorship requirements and preferences

Communications

•Messages sent through the Platform's chat feature

•Media files (images, videos) shared in messages

•Message read receipts and timestamps

1.2 Information Collected AutomaticallyAuthentication Data

•Login timestamps

•Authentication method used (email OTP or Google OAuth)

•Session tokens (stored in cookies)

Device and Usage Data

•IP address

•Browser type and version

•Operating system

•Device identifiers

•Pages visited and features used

•Referring URLs

Cookies and Similar Technologies

•Authentication cookies (swagonit_session, swagonit_auth_token) used to maintain your logged-in session

•These cookies are scoped to the .swagonit.com domain to enable functionality across our subdomains

•We do not currently use advertising or analytics tracking cookies

1.3 Information from Third-Party SourcesIf you choose to sign in with Google, we receive your name, email address, and profile picture from Google, as authorized by your Google account settings.2. How We Use Your Information2.1 Platform Operations

•Create and manage your account

•Authenticate your identity via email OTP or Google OAuth

•Display your profile to other users as part of the matching and discovery process

•Facilitate communication between Creators and Brands

•Process and display event listings

2.2 Matching and Discovery

•Generate AI-powered match suggestions between Creators and Brands using text embeddings and vector similarity search

•Analyze event and brand profile data to calculate match scores and compatibility

•Display match recommendations to relevant users

2.3 AI-Powered Features

•Event Matching: We use AI services to generate numerical representations (embeddings) of event descriptions and brand profiles to identify compatible sponsorship pairings

•Terms Extraction: We may use AI to analyze messages exchanged between Creators and Brands to identify and summarize proposed sponsorship terms (e.g., amounts, deliverables, timelines)

•Messaging Assistance: We may use AI to provide optional communication suggestions to users

2.4 Communication

•Send one-time password (OTP) codes for account authentication

•Send transactional notifications related to your account and activity

•Respond to your inquiries and support requests

2.5 Platform Improvement

•Monitor and analyze usage patterns to improve the Platform

•Identify and fix technical issues

•Develop new features and services

2.6 Safety and Compliance

•Detect, prevent, and address fraud, abuse, or security incidents

•Enforce our Terms of Service

•Comply with legal obligations

We do not sell your personal information. We share your information only in the following circumstances:3.1 With Other Users

•Your Creator or Brand profile information (name, description, images, tags, social links) is visible to other Platform users as part of the matching and discovery process

•If you have a public profile (accessible via a slug URL), certain profile information is visible to anyone who visits that URL

•Messages you send are visible to the recipient(s) within the sponsorship conversation

•When you are matched with another user, relevant profile and event information is shared with the matched party

3.2 With Service ProvidersWe share information with third-party service providers who assist us in operating the Platform. These providers are contractually obligated to use your information only for the purposes we specify:

Provider

Purpose

Data Shared

Amazon Web Services (AWS)

File storage and content delivery

Uploaded images and media files

Google Cloud

OAuth authentication and Maps/Places services

Email, name, profile picture; location queries

Resend

Email delivery

Email address (for OTP codes and notifications)

OpenAI

AI matching and terms extraction

Event descriptions, brand profiles, chat messages

Google AI (Gemini)

Backup AI embeddings and terms extraction

Event descriptions, brand profiles, chat messages

Anthropic

Optional messaging assistance

Chat message content (when feature is active)

Cal.com

Scheduling onboarding calls

Name and email (for booking)

Railway

Infrastructure hosting

All Platform data (hosted on Railway infrastructure)

3.3 For Legal ReasonsWe may disclose your information if required to do so by law or in response to valid legal process, including:

•Subpoenas, court orders, or other legal requests from government authorities

•To protect the rights, property, or safety of SwagOnIt, our users, or the public

•To enforce our Terms of Service

•In connection with an investigation of fraud, security breaches, or other potentially illegal activity

3.4 Business TransfersIf SwagOnIt is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.4. Data RetentionWe retain your personal information for as long as your account is active or as needed to provide you with the Platform. Specifically:

Data Type

Retention Period

Account information

Duration of account existence

Profile information

Duration of account existence

Messages and chat history

Duration of account existence

Event listings

Duration of account existence

OTP codes

10 minutes (automatically expired)

Authentication sessions

Access tokens: 7 days; Refresh tokens: 30 days

Brand invitation tokens

Until used or expired (as configured)

Uploaded media files

Duration of account existence

After account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law, necessary to resolve disputes, or needed to enforce our agreements.Some information may persist in encrypted backups for a limited period and will be permanently deleted when those backups are rotated.5. Data SecurityWe implement reasonable technical and organizational measures to protect your personal information, including:

•Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS

•Token security: Brand invitation tokens are SHA-256 hashed before storage; plain tokens are never stored

•Passwordless authentication: We use OTP and OAuth-based authentication, eliminating password-related risks such as credential stuffing or password database breaches

•Access controls: Role-based access controls restrict data access to authorized personnel and functionality

•Secure file storage: Uploaded files are stored in Amazon S3 with access controlled via time-limited presigned URLs (1-hour expiration)

•Infrastructure security: Our hosting infrastructure provides additional layers of security

No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.6. Your Rights and Choices6.1 Access and PortabilityYou have the right to request a copy of the personal information we hold about you. You can access most of your information directly through your account settings and profile pages.6.2 CorrectionYou may update or correct your personal information at any time through your account settings or profile editing features.6.3 DeletionYou may request deletion of your account and associated personal information by contacting us at privacy@swagonit.com or through your account settings. Upon receiving a verified deletion request, we will delete your information as described in Section 4.Please note that:

•Messages you sent to other users may remain visible to those users

•Information that has been de-identified or aggregated may be retained

•We may retain certain information as required by law

6.4 Communication PreferencesYou may manage your notification preferences through the Platform's settings. Note that you cannot opt out of transactional communications necessary for account security (e.g., OTP codes).6.5 Cookie ManagementYou can control cookies through your browser settings. However, disabling authentication cookies will prevent you from using the Platform, as they are essential for maintaining your login session.7. California Privacy Rights (CCPA/CPRA)If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):7.1 Right to KnowYou have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.7.2 Right to DeleteYou have the right to request deletion of your personal information, subject to certain exceptions under applicable law.7.3 Right to CorrectYou have the right to request correction of inaccurate personal information.7.4 Right to Opt-Out of Sale or SharingWe do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.7.5 Right to Non-DiscriminationWe will not discriminate against you for exercising any of your privacy rights.7.6 How to Exercise Your RightsTo exercise your California privacy rights, contact us at privacy@swagonit.com. We will verify your identity before processing your request.7.7 Categories of Information CollectedIn the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

Category

Examples

Collected

Identifiers

Name, email, phone number

Yes

Personal information (Cal. Civ. Code 1798.80)

Name, phone number

Yes

Internet or network activity

Browsing history, Platform usage data

Yes

Geolocation data

Event locations (user-provided)

Yes

Professional or employment info

Job title, company name (Brand contacts)

Yes

Audio, visual, or similar info

Profile photos, event photos, chat media

Yes

Inferences

Match scores, AI compatibility assessments

Yes

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):8.1 Legal Bases for ProcessingWe process your personal information based on the following legal grounds:

•Performance of a contract: Processing necessary to provide the Platform and fulfill our Terms of Service

•Legitimate interests: Processing necessary for our legitimate business interests (Platform improvement, security, fraud prevention), balanced against your rights

•Consent: Processing based on your explicit consent (AI-powered features, optional communications)

•Legal obligation: Processing required to comply with applicable laws

8.2 Your RightsIn addition to the rights described in Section 6, you have the right to:

•Restrict processing of your personal information in certain circumstances

•Object to processing based on our legitimate interests

•Data portability -- receive your personal information in a structured, machine-readable format

•Withdraw consent at any time, without affecting the lawfulness of prior processing

•Lodge a complaint with your local data protection authority

8.3 International Data TransfersYour information may be transferred to and processed in the United States, where our servers and service providers are located. When we transfer data outside the EEA, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.8.4 Data Protection OfficerFor GDPR-related inquiries, contact us at privacy@swagonit.com.9. Children's PrivacyThe Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete that information. If you believe a child under 18 has provided us with personal information, please contact us at privacy@swagonit.com.10. AI and Automated Decision-Making10.1 How We Use AISwagOnIt uses artificial intelligence in the following ways:

•Match Generation: AI analyzes event descriptions and brand profiles to generate numerical representations (embeddings) and calculate compatibility scores used to suggest potential sponsorship matches

•Terms Extraction: AI may analyze chat conversations to identify and summarize proposed sponsorship terms, such as financial amounts, deliverables, and timelines

•Communication Assistance: AI may optionally suggest messaging prompts to facilitate negotiation between users

10.2 Human OversightAI-generated matches and extracted terms are suggestions only. No binding decisions are made solely by automated processing. Users retain full control over whether to pursue any match or accept any terms.10.3 Third-Party AI ProvidersAI processing is performed by third-party providers (OpenAI, Google AI, Anthropic). Chat messages and profile data submitted for AI processing may be transmitted to these providers' servers. These providers are contractually prohibited from using your data for their own training purposes.10.4 Your ChoicesYou may choose not to use AI-powered features. However, opting out of AI matching may limit the Platform's ability to suggest sponsorship opportunities.11. Third-Party Links and ServicesThe Platform may contain links to third-party websites or integrate with third-party services (e.g., Google Maps for event locations, Cal.com for scheduling). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you interact with.12. Changes to This Privacy PolicyWe may update this Privacy Policy from time to time. When we make material changes, we will:

•Update the "Last Updated" date at the top of this page

•Notify you via email or through the Platform

•Provide a reasonable period for you to review the changes

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.13. Contact UsIf you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

General inquiries: support@swagonit.comPrivacy-specific inquiries: privacy@swagonit.comWebsite: https://swagonit.com

Summary of Key Points

Topic

Summary

What we collect

Account info, profile data, event data, messages, device/usage data

How we use it

Platform operations, AI matching, communication, security

Who we share with

Other users (profiles, messages), service providers, legal authorities (if required)

AI usage

Matching embeddings, terms extraction from chat, optional messaging assistance

Payments

We do not process payments; financial transactions occur outside the Platform

Authentication cookies only; no advertising or analytics tracking cookies

Data sales

We do not sell your personal information

Your rights

Access, correct, delete, port your data; opt out of non-essential processing

Retention

Data retained while account is active; deleted within 30 days of account deletion

Children

Platform not intended for users under 18

Help Terms Privacy