Privacy Policy

1. Data We Collect

We collect information you provide directly (email address when joining our waitlist or creating an account), information generated as you use our service (render history, API usage, billing details), and technical information (IP address, browser type, pages visited) collected automatically via cookies and analytics tools.

2. Cookies

We use cookies for authentication (session management), preferences, and advertising measurement. Advertising cookies (Google Ads) are only set after you grant consent via the banner shown to users in applicable regions. You may withdraw consent at any time by clearing cookies or using your browser's cookie controls. Strictly necessary cookies (authentication) cannot be disabled without breaking core functionality.

3. Google Ads & Consent Mode

We run advertising on Google Ads and use Google's Consent Mode v2. When you visit from an EU/EEA country, ad measurement and personalization signals are withheld until you accept cookies. If you decline, only aggregate, cookieless modeling is used. Conversion events (signup, render, upgrade) are reported to Google Ads to measure campaign effectiveness.

4. Analytics

We use Vercel Analytics for aggregated, privacy-friendly page view statistics. Vercel Analytics does not use cookies and does not track individuals across sites.

5. Third-Party Services

We share data with third parties only as necessary to operate the service:

• Stripe — payment processing. Stripe receives billing details and processes payments on our behalf.
• WorkOS — authentication and identity management. WorkOS stores your email and manages login sessions.
• Convex — backend database and serverless functions. Render history and account data are stored in Convex.
• Vercel — hosting and infrastructure. Vercel processes all web requests.
• Google — advertising measurement (Google Ads) subject to your consent preferences.

6. Data Retention

Account data is retained for the lifetime of your account plus 90 days after deletion. Render history is retained for 12 months. Billing records are retained as required by applicable law (typically 7 years). You may request deletion of your personal data at any time by contacting us.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, restrict processing of, and export your personal data. You also have the right to object to processing and to withdraw consent where processing is based on consent. To exercise these rights, contact us at the address below. We will respond within 30 days.

8. Contact

For privacy inquiries or to exercise your data rights, email privacy@snapkit.ai.