Skip to main content
← Back to SweepCraftLegal Document

Privacy Policy

Effective date: October 17, 2026

Overview & Scope

This Privacy Policy describes how SweepCraft collects, uses, stores, and protects information submitted through this website and waitlist. SweepCraft is an independent software research initiative investigating mortgage acceleration mathematics. This landing page is informational and exists solely to gauge consumer interest in an in-development concept. SweepCraft is not a bank, credit union, lender, depository institution, or loan servicer. Any future account would be issued and maintained by a future partner credit union.

Information We Collect

When you choose to join our waitlist, we collect limited personal information to evaluate geographic demand and communicate project updates. We collect the following specific data fields:

  • Email Address: Your email address is collected to administer double opt-in confirmation, provide waitlist updates, and communicate future project availability. We store both the normalized lowercase email address and a keyed HMAC-SHA-256 cryptographic representation (email HMAC).
  • Five-Digit U.S. ZIP Code: Required to analyze geographic distribution and match future partner credit union branch and charter footprints.
  • Optional Mobile Phone Number: If provided, stored in standard E.164 format (+1XXXXXXXXXX). Phone numbers are strictly optional and are collected only when accompanied by explicit text messaging consent.
  • Consent Records: When a phone number is provided, we record the boolean consent confirmation, the server-controlled consent timestamp, and the exact version of the consent text (version 2026-09-16.1).
  • Attribution and Campaign Data: Optional referral sources and standard UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) to determine marketing channel effectiveness.
  • Operational Timestamps: Timestamps marking record creation (signup), double opt-in confirmation, notification delivery, last active engagement, and any financial coarsening applied to the record before this policy took effect.
  • Confirmation Security Material: Cryptographically random double opt-in confirmation tokens. Only SHA-256 hashes of confirmation tokens are stored on waitlist records; raw token values exist transiently within queued outbound message rows until delivery completes or expires.
  • Abuse-Prevention and Suppression Records: Short-lived keyed HMAC IP counters used for rate limiting, bounce/complaint suppression lists (stored as HMACs), and deletion tombstones.

Information Held from Earlier Submissions: Earlier versions of our waitlist asked for mortgage details (including current principal mortgage balance, expected monthly cash flow surplus, original mortgage loan amount, loan issue date, original loan payoff date, loan interest rate, and loan monthly payment). Any figures already provided through earlier signups are kept under our existing retention schedule described below. We no longer collect these mortgage details on the waitlist form.

Mobile Phone & SMS Communications

Providing a mobile telephone number is completely optional and omitting your phone number will never prevent you from joining the waitlist or receiving email updates. When you submit a phone number and check the consent box, you agree to the following exact disclosure:

“I agree to receive occasional text messages from SweepCraft regarding waitlist status and launch updates at the mobile number provided. Message and data rates may apply. Reply STOP to cancel at any time. Consent is not required to join the waitlist.” (Version 2026-09-16.1)

How We Use Your Information & Data Minimization

We use waitlist data strictly to verify genuine interest, validate mathematical assumptions against previously provided representative household cash flows, and contact interested homeowners if and when pilot programs become available.

We practice rigorous data minimization:

  • Internal administrative notifications sent upon signup confirmation contain only the internal record identifier and confirmation timestamp; they never include emails, phone numbers, ZIP codes, mortgage balances, or surplus amounts.
  • There is no public read API, administrative dashboard, or external export route exposing waitlist submissions.
  • We do not sell, rent, or trade your personal information to third parties, marketers, or data brokers.

Third-Party Service Processors

To securely operate the website and waitlist, we rely on established third-party infrastructure providers who process limited data on our behalf under strict technical safeguards:

  • DigitalOcean: Application hosting on DigitalOcean App Platform (New York region), taking over from Vercel during a hosting migration; requests reach the application through DigitalOcean's content delivery network, which is operated by Cloudflare. Holds build and deployment logs, application runtime logs, and request metadata processed in transit (IP addresses, HTTP headers). Retention: DigitalOcean's documentation states that build and deployment logs are retained for 90 days; it does not state a retention period for runtime logs.
  • Vercel: Application hosting and serverless request compute. Holds request logs, IP addresses, and HTTP headers. Retention: provider standard log retention (typically up to 30 days).
  • Supabase: Private managed relational database and automated backups, hosted in Canada (AWS Canada Central region). Waitlist data is stored there, outside the United States. Holds waitlist submissions, confirmation state, suppression records, and tombstones. Primary records are retained per schedule; automated daily backups are retained for 7 days.
  • Resend: Transactional double opt-in confirmation email delivery. Holds recipient email address, message ID, transmission timestamps, and delivery event logs. Provider delivery and event logs are retained per Resend standard policy (typically 30 days); no marketing contacts or audience lists are maintained.
  • Cloudflare Turnstile: Bot detection and abuse prevention. Holds challenge telemetry and transient client connection metadata. Ephemeral session evaluation; no persistent visitor profiles.

We share data only with these service providers to the extent necessary to deliver the waitlist service.

Data Retention Schedule

We enforce an automated data lifecycle schedule. Because SweepCraft is still in development, we keep confirmed waitlist records (including exact financial figures and loan details) so that people who joined can be contacted when there is something to offer them. Retention is bounded as follows:

  • Unconfirmed Submissions: Submissions that do not complete double opt-in email confirmation are permanently purged after 14 days (UNCONFIRMED_TTL).
  • Confirmation Token Hashes: Expire after 24 hours and are nulled from records within 24 hours of expiration (TOKEN_HASH_GRACE).
  • Exact Financial Values and Loan Details: Your exact mortgage balance, monthly surplus, and mortgage loan details (original loan amount, issue date, payoff date, interest rate, and monthly payment) are kept as submitted for as long as your confirmed record is retained. They are not converted into bands or deleted separately before your record itself is deleted. A record whose exact balance and surplus were already replaced with broad bands before this policy took effect keeps those bands; the exact values of that record cannot be recovered.
  • Confirmed Records: Retained until the earlier of (a) the owner announcing that the product is discontinued (CONFIRMED_END_CONDITION), in which case records are deleted 7 days after that announcement takes effect (DISCONTINUATION_GRACE), or (b) 60 months (CONFIRMED_CEILING) after the latest recorded engagement with your record. When either occurs, the record is permanently deleted.
  • Development Updates and Engagement: While the product is in development we intend to send a development update to confirmed addresses about once every 12 months (ENGAGEMENT_UPDATE_INTERVAL). Receiving that update counts as engagement and restarts the retention period of 60 months. Each update explains how to ask for deletion: email sweepcraftmike@gmail.com from the address you want removed.
  • Outbox Message Records: Retained for 7 days (OUTBOX_TERMINAL_TTL) after reaching terminal delivery status before permanent deletion.
  • Abuse & Rate-Limiting Counters: Retained for 24 hours (ABUSE_COUNTER_TTL) then automatically expired.
  • Suppression Records: Email HMAC suppression entries for bounced or complaining addresses carry no expiry (SUPPRESSION_TTL) to protect delivery reputations.
  • Automated Backups: Encrypted daily database backups are retained for 7 days (BACKUP_RETENTION_DAYS) by our infrastructure provider. Backups are never restored to recreate individually deleted records.
  • Run Reports: Automated purge execution logs and run reports are retained for 90 days (RUN_REPORT_TTL).
  • Tombstones: Cryptographic deletion tombstones are retained for 36 months (TOMBSTONE_TTL).

Your Rights: Data Deletion Process

You have the right to request deletion of your waitlist record at any time. To request deletion, send an email from the address you wish to have removed to sweepcraftmike@gmail.com.

Our deletion process operates as follows:

  • Requests are honored when received directly from, or confirmed by reply from, the email address subject to deletion.
  • All valid deletion requests are executed within our service-level agreement of 30 days (DELETION_SLA).
  • Execution permanently deletes your waitlist record and associated message outbox items. A cryptographic tombstone holding only a keyed HMAC and timestamp is retained for 36 months (TOMBSTONE_TTL) to prevent accidental re-addition through data restoration.
  • Email correspondence regarding deletion requests is permanently removed from our mailbox within 30 days (REQUEST_CORRESPONDENCE_TTL) of execution.

Changes to This Policy

We may revise this Privacy Policy from time to time. Any updates will be published at this stable URL with an updated effective date.