Privacy Policy

1. Information We Collect

When you use SnapRender ("Service"), we collect:

• Account information: Email address, name (optional), and hashed password when you register
• Payment information: Processed securely by Stripe. We do not store your card details.
• Usage data: API request counts, timestamps, and response times for quota tracking and service monitoring
• URLs submitted: The URLs you submit for screenshots are processed to generate the screenshot and may be logged for debugging and abuse prevention
• Technical data: IP addresses, request headers, and server logs for security and operational purposes
• Site access settings: The domains you register for Site access. Custom request headers you send with a capture are used for that capture only and are not stored

2. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process payments and manage subscriptions
• Track usage against your plan limits
• Send transactional emails (verification codes, password resets, quota alerts)
• Prevent abuse and enforce our Terms of Service
• Debug issues and improve the Service

3. Data Storage and Security

Your data is stored on servers hosted in the European Union. We implement reasonable security measures including:

• Passwords are hashed using bcrypt
• API keys are stored as SHA-256 hashes (the plaintext key is shown only once at creation)
• All connections are encrypted via TLS/HTTPS
• Database access is restricted to the application server

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Screenshots

Screenshots you generate through the API are returned directly in the API response and cached temporarily (based on your plan's cache settings). Cached screenshots are automatically deleted after the cache TTL expires. We do not permanently store your screenshots or use them for any purpose other than delivering the Service.

5. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Resend: Transactional email delivery.
• Cloudflare: DNS and CDN services.
• OpenAI: Ad measurement, only for visitors who arrive from one of our ads in ChatGPT (see Cookies).

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes (e.g., fraud prevention). Usage logs are retained for up to 90 days.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability

To exercise these rights, contact us at [email protected].

8. Cookies

We use a session cookie to maintain your login state on the dashboard. This is a strictly necessary cookie and does not require consent. We do not use third-party analytics cookies.

If you arrive from one of our ads in ChatGPT, we load OpenAI's ad measurement script. It stores the ad click identifier in a cookie for up to 30 days and tells OpenAI when that visit leads to a sign-up, so we can see whether the ad works. We do not send your email address, name or account details to OpenAI. Visitors who did not come from one of these ads never load the script.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective upon posting. We encourage you to review this page periodically.

11. Contact

For questions about this Privacy Policy, contact us at [email protected].