Legal

Privacy Policy

How Swarmio Inc. collects, uses and protects personal information — on this website and in our business with customers, partners and suppliers.

Last updated 9 October 2026Controller Swarmio Inc.
01

Who we are and what this policy covers

Swarmio Inc. (“Swarmio”, “we”, “us”) is a Canadian company. We build and operate Swarmio Sovereign AI.

This policy explains how we handle personal information about visitors to this website and about the people we deal with in business: prospective and existing customers, partners and suppliers, and their representatives. For this information, Swarmio is the controller — the organization that decides why and how it is processed.

What this policy does not cover. When an organization uses Swarmio Sovereign AI, that organization decides what data is processed on the platform and why. We process that data only on its instructions, under our agreement with it. If you use a Swarmio-powered service provided by your employer, institution or another organization, please read that organization’s privacy notice and direct your questions to it.

Websites run by others that we link to are covered by their own policies.

02

Information we collect

Information you give us

  • When you contact us: your name, work email address, organization and the content of your message.
  • In the course of business: business contact details such as your name, job title, organization, email address and telephone number, and the correspondence, meeting notes and contract information that arise when we work with you or your organization.

Please do not send us sensitive personal information, such as health, financial or government identification information, through our contact form or by email.

Information collected automatically

  • Technical data. To deliver pages and to protect the website and its forms against abuse and spam, our hosting provider processes technical data such as your IP address, browser type and the time of your request.
  • Website statistics. We use the statistics built into our hosting platform, Framer. They do not use cookies or persistent identifiers and give us aggregate figures only — for example, how many times a page was viewed and which site referred visitors to it. We cannot use them to identify you.
  • Fonts. Some typefaces on this website are delivered by Google Fonts. When your browser loads them, Google receives your IP address and browser information. Google’s handling of that information is described in its own privacy policy.
  • Images. Some images on this website are delivered from a third-party content delivery network (Amazon CloudFront). When your browser loads them, the network receives your IP address and browser information.

We do not use any technology on this website that identifies, locates or profiles you.

03

How we use it, and our legal bases

We use personal information only for the purposes below. Where the EU or UK General Data Protection Regulation (GDPR) applies, each purpose rests on the legal basis shown.

PurposeLegal basis under the GDPR
Responding to your enquiry and arranging a meeting or working sessionOur legitimate interest in responding to people who contact us, or steps you ask us to take before entering into a contract
Managing our relationships with customers, partners and suppliersPerformance of a contract, and our legitimate interest in running our business
Operating and securing this website, including preventing spam and abuseOur legitimate interest in a secure, working website
Understanding, in aggregate, how the website is usedOur legitimate interest in improving the website, using cookie-free statistics that do not identify you
Sending you news about SwarmioYour consent, where the law requires it. You can withdraw it at any time
Meeting legal, tax and regulatory obligations, and establishing or defending legal claimsLegal obligation, and our legitimate interest in protecting our rights

In Canada, we rely on your consent, which may be implied when you contact us or do business with us. You may withdraw it at any time, subject to legal and contractual restrictions. Elsewhere, we rely on the equivalent grounds under local law.

What we do not do. We do not sell personal information, and we do not share it for cross-context behavioural or targeted advertising. We do not build profiles about you, and we do not make decisions about you based solely on automated processing. We do not use personal information collected through this website or in the course of business to train AI models.

We send commercial electronic messages only in line with Canada’s Anti-Spam Legislation and equivalent laws elsewhere. Every such message includes a way to unsubscribe.

04

Cookies

This website does not set cookies and does not store information in your browser. Our website statistics are cookie-free. Because nothing is stored on your device for statistics or advertising, there is no cookie banner.

If we ever add a technology that stores or reads information on your device and is not strictly necessary to deliver the website, we will update this policy and, where the law requires it, ask for your consent first.

05

Who we share it with

We share personal information only as described here, and only as much as each recipient needs.

  • Service providers that process information on our behalf, under contracts that require them to protect it and use it only on our instructions: website hosting, forms and statistics (Framer B.V., the Netherlands); our business email and productivity providers; font delivery (Google); and image delivery (Amazon CloudFront).
  • Delivery partners. Swarmio is often delivered through telecommunications operators, system integrators and other authorized partners. If your enquiry is best served by a partner in your country, we will ask you before we introduce you and share your details with them.
  • Companies in our corporate group, where needed to run our business, under the protections described in this policy.
  • Professional advisers, such as lawyers, accountants and auditors, who are bound by duties of confidentiality.
  • A buyer, investor or successor, if Swarmio is involved in a merger, acquisition, financing or sale of all or part of its business. Any recipient will be required to use the information consistently with this policy.
  • Authorities, where the law requires it, or where necessary to protect the rights, property or safety of Swarmio, our customers or others.
06

International transfers

Swarmio is based in Canada. Our service providers may process information in other countries, including the Netherlands, other member states of the European Union and the United States.

  • From the EU, EEA and UK to Canada. The European Commission recognizes Canada as providing an adequate level of protection for organizations subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), a finding it confirmed in its review of 15 January 2024. The United Kingdom recognizes Canada on the same basis.
  • Other transfers are protected by an adequacy decision, by the EU–US Data Privacy Framework where the recipient is certified under it, or by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.
  • Quebec. Before personal information about Quebec residents is communicated outside Quebec, we assess whether it will be adequately protected, as Quebec law requires.

You can ask us for more information about these safeguards.

07

How long we keep it

  • Enquiries: 24 months after our last contact with you. We then delete or anonymize them, unless the enquiry has become a business relationship.
  • Customer, partner and supplier records: for the duration of the relationship and afterwards for as long as we need them to meet legal, tax and accounting obligations and to establish or defend legal claims.
  • Unsubscribe requests: we keep a minimal record of your email address so that we do not contact you again.
  • Technical data is kept by our hosting provider only for as long as needed to deliver and secure the website.
08

How we protect it

We protect personal information with technical and organizational measures appropriate to its sensitivity, including restricting access to the people who need it and binding our service providers to confidentiality and security obligations. No method of transmission or storage is completely secure. If a breach creates a real risk of significant harm, or a risk to your rights and freedoms, we will notify you and the relevant authorities as the law requires.

09

Your rights

Depending on where you live, you have some or all of these rights over your personal information:

  • to know what we hold and to receive a copy of it;
  • to have it corrected if it is inaccurate or incomplete;
  • to have it deleted;
  • to restrict or object to our use of it, including at any time to direct marketing and to any use based on our legitimate interests;
  • to receive it in a portable format;
  • to withdraw your consent, where we rely on it; and
  • to complain to a data protection authority.

How to exercise them

Write to sales@swarmio.inc with “Privacy request” in the subject line. We may ask you to confirm your identity before we act, and we will respond within the time the law requires — generally within one month or 30 days. We will not treat you differently for exercising your rights. If we cannot fully meet a request, for example because the law requires us to keep certain records, we will tell you why.

Regional information

  • European Union, EEA and United Kingdom. You may complain to the data protection authority where you live or work, or where you believe an infringement occurred. In the United Kingdom, this is the Information Commissioner’s Office.
  • Canada. You may contact the Office of the Privacy Commissioner of Canada. Residents of Quebec may also contact the Commission d’accès à l’information du Québec, and have the further rights that Quebec law provides, including the right to ask that information about them be de-indexed where that law’s conditions are met.
  • United States. Residents of states with consumer privacy laws, such as California, may have the right to know what personal information we collect and how we use it; to access, correct and delete it; and to opt out of its sale, its sharing or its use for targeted advertising, none of which we do. You may use an authorized agent, and you may appeal our decision on a request by replying to it. We collect identifiers (such as name and email address), professional information (such as organization and job title) and internet activity information (such as the technical data used to deliver the website), for the purposes described in section 3.
  • Middle East and other regions. Where local law, such as the UAE Personal Data Protection Law, Saudi Arabia’s Personal Data Protection Law or Qatar’s Personal Data Privacy Protection Law, gives you rights over your personal information, we honour them. You may also complain to the competent authority in your country.
10

Children

This website and our services are intended for businesses and public-sector organizations. They are not directed to children, and we do not knowingly collect personal information from anyone under 16.

11

Contact us

The person in charge of the protection of personal information at Swarmio is our Executive Chairman. For any question, request or complaint about this policy or about how we handle personal information, please write to:

Person in charge of the protection of personal information
Executive Chairman, Swarmio Inc.
sales@swarmio.inc — subject line “Privacy request”
12

Changes to this policy

We will update this policy as our practices or the law change. The date at the top of this page shows when it last changed. If we make a material change, we will highlight it here and, where we have a relationship with you, tell you directly.