Privacy Policy

Welcome to SnapshotLink ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information with care and transparency.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital asset management platform, website at snapshotl.ink, and associated services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

We collect the following categories of information:

Account Information When you register for SnapshotLink, we collect your name, email address, and password. If you sign up via a third-party service (e.g., Google, GitHub), we receive the information permitted by that service.

Usage Data We automatically collect information about how you interact with our Service, including pages visited, features used, search queries, upload frequency, and session duration.

Files and Content We store the digital assets (images, videos, documents) you upload to our platform, along with any metadata, tags, custom attributes, gallery configurations, and collection rules you create.

Technical Data We collect IP addresses, browser type and version, operating system, device identifiers, time zone, and referring URLs to improve performance and security.

Payment Information Billing information is handled by our third-party payment processor (Stripe). We do not store full credit card numbers on our servers.

Communications If you contact our support team, we retain those communications to improve our service and assist with future inquiries.

We use the information we collect to:

- Provide, operate, and maintain the Service - Create and manage your account - Process payments and prevent fraud - Respond to your requests, comments, and questions - Send transactional emails (account confirmations, billing receipts, password resets) - Send product updates, newsletters, and promotional content (you may opt out at any time) - Analyze usage patterns to improve the Service - Detect, investigate, and prevent security incidents and abuse - Comply with legal obligations - Enforce our Terms of Service

We process your personal data based on: contract performance (to provide the Service), legitimate interests (security, fraud prevention, product improvement), legal obligations, and consent (where applicable).

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers We engage trusted third-party vendors to perform functions such as cloud hosting (AWS), payment processing (Stripe), email delivery (Resend), analytics (Mixpanel), and customer support. These providers access your information only to perform their services and are bound by confidentiality agreements.

Business Transfers If SnapshotLink is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or material changes to this policy.

Legal Requirements We may disclose your information if required by law, regulation, or valid legal process (such as a subpoena, court order, or government request), or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

With Your Consent We may share information with third parties when you explicitly consent to sharing.

Aggregated / Anonymized Data We may share aggregated, anonymized information that cannot reasonably be used to identify you.

We use cookies and similar tracking technologies to operate and improve the Service.

Essential Cookies Required for the Service to function. These cannot be disabled.

Analytics Cookies Help us understand how users interact with the Service so we can improve it. These are set by us and our analytics providers.

Preference Cookies Remember your settings and preferences (e.g., theme, language).

Marketing Cookies Used to deliver relevant advertisements. You can opt out through our cookie preferences.

You can control cookies through your browser settings. However, disabling certain cookies may affect functionality. We honor "Do Not Track" browser signals where technically feasible.

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we delete or anonymize your data within 30 days, except where we are required to retain it by law.

Uploaded files and assets are deleted within 30 days of account termination. Backup copies may persist for up to 90 days in disaster recovery systems.

Log data is retained for up to 12 months for security and debugging purposes.

We implement industry-standard security measures to protect your information:

- Data encrypted in transit (TLS 1.2+) and at rest (AES-256) - Regular security audits and penetration testing - Role-based access controls for our team - Multi-factor authentication support for your account - Automated threat monitoring and incident response procedures

While we take reasonable precautions, no system is completely secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have the following rights:

- Access: Request a copy of the personal information we hold about you - Correction: Request correction of inaccurate information - Deletion: Request deletion of your personal information ("right to be forgotten") - Portability: Request your data in a machine-readable format - Restriction: Request restriction of processing in certain circumstances - Objection: Object to processing based on legitimate interests - Opt-out: Unsubscribe from marketing emails at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

California Residents (CCPA): You have the right to know about, delete, and opt out of the sale of personal information. We do not sell personal information.

EU/UK Residents (GDPR): You have the right to lodge a complaint with your local data protection authority.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete it promptly. If you believe we may have collected information from a child, please contact us at [email protected].

SnapshotLink operates globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States and European Union member states. These countries may have different data protection laws.

When transferring data from the EU/EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on adequacy decisions.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, notify you by email or through a prominent notice on the Service.

Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SnapshotLink Privacy Team Email: [email protected] Website: https://snapshotl.ink

We will respond to all legitimate requests within 30 days.