Privacy policy
Last updated: October 24, 2026
Your privacy matters to us. This policy explains what Shwone collects about you and why, who else sees it, and what you can ask us to do with it. We never sell your data.
Shwone is run by Shwone LLC, 5441 S Macadam Ave Ste N, Portland, OR 97239, United States ("Shwone", "we").
Who this policy covers
This policy covers:
- Merchants: people and businesses who sign up for Shwone to build a website and sell, and the people who use their accounts.
- Visitors to shwone.com.
It doesn't cover the customers of a merchant: people who buy from a merchant's website, fill in a merchant's forms or join a merchant's email list. The merchant is responsible for that information, and Shwone handles it only on the merchant's behalf, under our Data Processing Agreement. If you're a merchant's customer, ask that merchant about your information. What Shwone itself does with information about people visiting merchants' websites is in our notice for visitors to Shwone websites.
What we collect and why
We collect only what we need to run Shwone.
Your account
When you sign up, we ask for your name, email address and a password. We use them to create your account, sign you in and send you emails about your account. Your password is stored scrambled (hashed), so nobody at Shwone can read it.
Your business and your website
We store what you put into Shwone: your business's name, description and logo, your products and their photos, your website and your forms, so that you can build your website and run your business with it. We keep this while your account is open.
Signing in
When you sign in, we set one cookie that keeps you signed in, and we note which browser you used, to help keep your account secure. We don't record your IP address when you sign in.
Emails we send you
We send you emails your account needs, such as confirming your email address and resetting your password. We'll only send you other emails, such as news about Shwone, if you choose to receive them, and you can stop them at any time. If an email to your address bounces or is marked as spam, we keep a note of the address so we stop emailing it.
Payments
Payments are handled by Stripe. When you take payments through Shwone, you have your own account with Stripe, and your customers' card details go to Stripe, never to Shwone's servers. If we start charging for Shwone, your payment details will go to Stripe too, and we'll keep only a record of what you paid.
Visiting shwone.com
Shwone.com doesn't use cookies, analytics or ads, and doesn't track you.
Keeping Shwone safe
To protect Shwone and its users from attacks, our firewall keeps a record of requests it blocks, including their IP address, for one month. To stop repeated sign-in attempts, we count attempts per email address, and store the address scrambled so it can't be read. Our servers keep their own logs for one month, to find and fix problems.
When you contact us
When you email us, we keep the conversation, including your email address, so we can refer back to it if you write again.
Cookies
Shwone uses one cookie, to keep you signed in to your account. It's essential: you can't sign in without it. We don't use advertising or tracking cookies, and shwone.com sets no cookies at all.
When we access or share your information
To run Shwone. We use a few companies to run Shwone for us:
- Amazon Web Services hosts Shwone, stores its data and sends its emails, in the United States.
- Stripe processes payments.
- Cloudflare points Shwone's domain names to our servers, and forwards email sent to shwone.com addresses to our inbox.
They may use your information only to provide their services to us.
To help you, or to stop abuse. No one at Shwone looks at your account except to help you when you ask, to fix a problem that needs a person, or to investigate a breach of our Acceptable Use Policy. Every time a member of our team opens a merchant's account, it's recorded.
When the law requires it. We'll disclose information only when we're legally required to, such as by a warrant, subpoena or court order. Unless the law forbids it, we'll tell you first.
Aggregated information. We may combine information so that it no longer identifies you or your business, and use it to understand and improve Shwone.
If Shwone changes hands. If Shwone is ever acquired or merges with another company, we'll tell you before your information is transferred or becomes subject to a different privacy policy.
Your rights
Wherever you live, you can:
- Know and see what information we have about you.
- Correct it. You can change your website and products yourself in Shwone; for anything else, ask us.
- Delete it. Email us and we'll delete your account and its information within 30 days, and from our backups within 14 days after that. Deleting your account closes it, and your website goes offline.
- Take it with you: ask us for a copy of your information.
- Object to how we use it, or ask us to limit how we use it.
- Complain to a data protection authority, if you think we've handled your information wrongly.
We won't treat you differently for using any of these rights. To use them, email us at support@shwone.com. We may need to confirm it's really you, usually by replying from the email address on your account. If someone writes on your behalf, we'll need your written permission.
How we protect your information
Everything between your browser and Shwone is encrypted (HTTPS). Shwone's database, its backups and stored files are encrypted too.
How long we keep your information
We keep your account's information while your account is open. When you ask us to delete it, we do so within 30 days, and it's gone from our backups within 14 days after that. Logs are kept for one month. We keep a note of email addresses that bounced or were marked as spam for as long as we send email, so we don't email them again. We may keep information longer if the law requires it, or to resolve a dispute.
Where your information is stored
Shwone is run in the United States, and your information is stored in the United States.
Age
Shwone is for running a business. You must be 18 or older to use it.
Changes and questions
We may update this policy as Shwone changes or the law requires. When we do, we'll change the date at the top, and if a change is significant, we'll email you before it takes effect.
Questions about this policy or your information? Email us at support@shwone.com, or write to Shwone LLC, 5441 S Macadam Ave Ste N, Portland, OR 97239, United States.
Adapted from the 37signals policies (github.com/basecamp/policies), available under CC BY 4.0.