Privacy Policy

SWD Editor, by YNX Labs · Last updated 17 July 2026

The short version: we collect as little as possible, we never receive the contents of your documents, and you can see, export, or delete your data anytime. The detail is below.

Your documents never reach us, and we can't touch them. A Sealed Web Document is made and sealed on your own machine, and it makes no network connection when someone reads it. Because your files never reach us, there is nothing in them for us to read, use, mine, sell, share, or train an AI or model on. You own what you make, full stop. We don't sell, share, or monetize your personal data either, and we run no advertising or tracking on it. This policy covers only the small amount of account data we keep so billing and sign-in work.

Who we are

SWD Editor is a product of YNX Labs, a company based in Canada. For the account data described here, YNX Labs is the data controller. You can reach us about anything in this policy at hello@swdeditor.com.

What we collect

Only what an account and a payment need. Nothing about your documents.

Data	What it is	When
Email address	Your sign-in identity and where account and billing emails go	When you sign in or create an account
Name	If your Google sign-in provides it	When you sign in with a provider
Sign-in identity	A token from Google or an email magic link that proves it's you	Each sign-in
Subscription	Your plan, term, renewal date, and status	When you buy or manage Plus
Payment details	Handled by Stripe and PayPal. We store a reference and the last 4 digits of a card, never the full number	At checkout
Invoices	Records of your payments, kept for tax and accounting	After each payment
Licensed devices	A name and last-seen time for the devices your Plus license runs on (up to 3)	When the app is used with a license
Email preferences	Which optional emails you've chosen to receive	When you set them
Support messages	What you send us if you contact support	When you email us

We do not collect the contents of your Sealed Web Documents, and the documents themselves contain no trackers or analytics that could report back to us or to you.

Why we use it, and our legal basis

Under the GDPR and UK GDPR, we rely on these legal bases (Canadian law relies on your consent and our legitimate business need in the same way):

To run your account and provide Plus, because it's necessary to perform our contract with you (sign-in, subscription, licensed devices).
To take payment and keep invoices, to perform the contract and to meet our legal obligations for tax and accounting.
To send account and security emails, our legitimate interest in keeping your account working and safe. These are transactional and can't be switched off while you have an account.
To send optional updates and tips, only with your consent, which you can withdraw anytime on your account page.
To answer support and improve the product, our legitimate interest in helping you and fixing problems.

We do not sell, share, or monetize your personal data, and we never use it for advertising or to train AI. No ads, no tracking, no data mining.

Who processes your data

We use a small number of trusted providers to run the service. Each only gets what they need:

Payments. Stripe and PayPal process payments and store card details securely on their systems.
Sign-in. Google, when you choose to sign in with it.
Email delivery. Our domain's email service, which sends your sign-in links and account emails.
Hosting. Namecheap, which provides the domain and the infrastructure that runs our account service.

These are our processors (or, for payments and sign-in, independent controllers for their own parts). We put appropriate data-protection terms in place with each.

How long we keep it

Account data. Kept while your account is open. If you delete your account, we remove your personal data promptly, except where we must keep some of it.
Invoices and tax records. Canadian tax law (the CRA) requires us to keep business and tax records for 6 years from the end of the tax year they relate to, so we hold invoices that long even after you close your account, then delete them.
Support messages. Kept a limited time after your issue is resolved.

Your rights over your data

Wherever you live, you can ask us to:

See it. get a copy of the personal data we hold about you. There's a data-export button on your account page, or email us.
Correct it. fix anything inaccurate.
Delete it. remove your account and personal data (subject to records we must keep by law). There's a delete button on your account page.
Take it elsewhere. receive your data in a portable format.
Object or restrict. to certain uses, and withdraw consent for optional emails anytime.

We won't charge you for a reasonable request or treat you differently for making one. We'll respond within the time the law requires (a month under the GDPR; without undue delay under Canadian law).

International transfers

We're based in Canada and our providers may process data in Canada, the United States, and the EU. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where data moves to a country without such recognition, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Cookies

We keep cookies to a minimum. We use one essential cookie to keep you signed in to your account; it's required for the account area to work and carries no advertising. Our marketing pages don't set tracking or advertising cookies. Because we don't set non-essential cookies, there's nothing to opt into.

Children

SWD Editor isn't directed at children, and paid accounts are for people old enough to form a contract where they live. We don't knowingly collect data from children. If you think a child has given us data, contact us and we'll remove it.

Contact and complaints

For any privacy question or to exercise a right, email hello@swdeditor.com.

If you're in the EU or UK and you're unhappy with how we've handled your data, you can also complain to your local data-protection authority. In Canada, you can contact the Office of the Privacy Commissioner. We'd always prefer you come to us first so we can put it right.

For EU and UK visitors: you're welcome to use SWD Editor, and we apply the GDPR and UK GDPR to your data as set out in this policy. YNX Labs is based in Canada. If you ever have a concern we can't put right, you can contact your local data-protection authority.