Snapopa

Privacy Policy

How we collect, use, and protect your information

Last Updated: January 1, 2025

Snapopa ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and API services.

1. Information We Collect

Information You Provide

  • Account Information: When you create an account, we collect your name, email address, and password.
  • Payment Information: When you subscribe to a paid plan, we collect billing information through our payment processor (Stripe). We do not store credit card numbers on our servers.
  • Contact Information: When you contact us, we collect the information you provide in your message.

Information Collected Automatically

  • Usage Data: We collect information about how you use our API, including request counts, endpoints accessed, and response times.
  • Log Data: Our servers automatically record information including your IP address, browser type, referring URLs, and timestamps.
  • Cookies: We use cookies and similar technologies for authentication and to improve your experience.

Information from Third Parties

  • OAuth Providers: If you sign in with Google or GitHub, we receive your name, email, and profile picture from those services.

2. How We Use Your Information

We use the collected information to:

  • Provide Services: Process your API requests and deliver the functionality you expect.
  • Manage Your Account: Create and manage your account, process payments, and communicate about your subscription.
  • Improve Our Services: Analyze usage patterns to improve performance, fix bugs, and develop new features.
  • Communicate: Send you important updates, security alerts, and (with your consent) marketing communications.
  • Ensure Security: Detect and prevent fraud, abuse, and security threats.
  • Legal Compliance: Comply with legal obligations and enforce our terms.

3. Information Sharing

We do not sell your personal information. We may share information in these limited circumstances:

  • Service Providers: With third-party vendors who assist in operating our services (e.g., payment processing, hosting, analytics).
  • Legal Requirements: When required by law, subpoena, or other legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • With Your Consent: When you explicitly authorize us to share information.

Third-Party Services We Use

  • Supabase: Database and authentication
  • Stripe: Payment processing
  • Cloudflare: CDN and security
  • Sentry: Error tracking

4. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

  • Account Data: Deleted within 30 days
  • API Logs: Retained for 90 days for debugging purposes
  • Captured Screenshots: Stored according to your plan's retention settings; deleted upon account closure

We may retain certain information longer if required by law or for legitimate business purposes.

5. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data.
  • Portability: Request your data in a portable format.
  • Opt-Out: Unsubscribe from marketing communications.

To exercise these rights, contact us at [email protected].

For California Residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of the "sale" of personal information (which we do not engage in).

For EU/EEA Residents (GDPR)

Our legal bases for processing include: contract performance, legitimate interests, and consent. You may lodge a complaint with your local data protection authority.

6. Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS 1.3) and at rest
  • Regular security audits
  • Access controls and authentication
  • Monitoring for unauthorized access

No system is 100% secure. If you discover a security vulnerability, please report it to [email protected].

7. Cookies

We use cookies for:

  • Essential Cookies: Required for authentication and security.
  • Analytics Cookies: To understand how you use our services.

You can control cookies through your browser settings, but some features may not work properly without them.

8. International Transfers

Your information may be processed in countries other than your own. We use appropriate safeguards (such as standard contractual clauses) for international data transfers.

9. Children's Privacy

Our services are not intended for children under 13 (or 16 in the EU). We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: [email protected]

Address: Snapopa