Privacy Policy

Introduction

SnapEasy ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Information We Collect

We collect information you provide directly to us:

• Account Information: Email address, name, and password when you create an account
• Export Files: The .zip parts of your Snapchat data export, containing your photos and videos and their metadata
• Payment Information: Credit card and billing details (processed securely through Stripe)
• Usage Data: How you interact with our website and app: pages viewed, buttons clicked, upload times, processing status, and errors you encounter

Purpose of Data Collection

We collect and process your data for the following purposes:

• To add correct EXIF data and organize your Snapchat memories
• To provide and improve our services
• To authenticate users and manage accounts
• To process payments and prevent fraud
• To communicate with you about service updates and support
• To comply with legal obligations

How We Store Your Data

Your data is stored securely on:

• Cloudflare R2: For encrypted storage of your memories file (encrypted at rest and in transit)
• Railway: For application data and user account information
• DigitalOcean: For processing your memories. Files do not live on the server after they are processed
• Stripe: For payment information (PCI-DSS compliant, we never directly handle your credit card data)

All data transfers use TLS/SSL encryption. Your account information is hashed and salted.

Data Retention and Deletion

Your uploaded export files and associated processed data are automatically deleted within 48 hours of upload, regardless of whether you download the results. We do not retain copies of your files after this period.

Account information is retained while your account is active. You can delete your account and all associated data at any time from Settings in the app, whether or not you have purchased a plan. If you can no longer sign in, email us and we will delete it for you.

Who Has Access to Your Data

Your data is processed by:

• Automated Systems Only: Your memories file is processed only by our automated EXIF tagging and organization algorithms
• No Human Review: SnapEasy staff never manually access or review your uploaded files or memories
• Service Providers: Only the third-party services listed below (Stripe, Clerk, Cloudflare, Railway, DigitalOcean, PostHog, Axiom, Endorsely, TikTok, Google, Resend) have access as needed for their functions

Third-Party Services

We use the following third-party services:

• Stripe: Payment processing (privacy policy: stripe.com/privacy)
• Clerk: Authentication and user management (privacy policy: clerk.com/privacy)
• Cloudflare: Temporary file storage and CDN. Protects our public endpoints from spamming and DDoS attacks (privacy policy: cloudflare.com/privacypolicy)
• Railway: Website and API hosting and our database (privacy policy: railway.app/privacy)
• DigitalOcean: Hosting for the background workers that unpack your export, read each memory's date and location, write the EXIF data, and build your download. Your files are handled on these servers only for the duration of processing (privacy policy: digitalocean.com/legal/privacy-policy)
• PostHog: Product analytics and error tracking (privacy policy: posthog.com/privacy)
• Axiom: Operational logging and error diagnostics (privacy policy: axiom.co/privacy)
• Endorsely: Affiliate referral tracking. If you arrive through a partner's affiliate link, a first-party cookie records the referral so we can credit that partner if you make a purchase (privacy policy: endorsely.com/privacy)
• TikTok Advertising. We use TikTok’s advertising and measurement technologies to measure the effectiveness of our advertising and understand website activity. These technologies may use cookies and collect information about page views, sign-ups, checkouts, and purchases. While you are signed in, and when you make a purchase, we may share a one-way hashed version of your email address and account ID, along with the purchase amount, for advertising measurement and audience purposes. We do not share your photos, videos, or exported files with TikTok. You may decline the cookie-based tracking through our cookie consent banner; to opt out of the purchase measurement as well, email us at [email protected]. TikTok’s processing of this information is governed by its Privacy Policy.
• Google Drive. If you choose to have your organized memories delivered to Google Drive, you authorize us to access Google Drive using the drive.file permission. This permission allows us to create and manage only the files and folders we create in your Drive. We do not access or modify other content in your Drive. We also receive the email address of the Google account you connect so we can show you which account is linked. You may revoke access at any time through your Google account settings or by disconnecting Google Drive in the app. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. For more information, see Google’s Privacy Policy.
• Resend. We use Resend to deliver emails, including export notifications, service notices, and processing support requests. If you provide your email address to receive reminders or product updates, we may store it in a Resend contact list for those purposes. Marketing emails include an unsubscribe option. Resend receives your email address and email content, but not your uploaded Snapchat memories or other files.

We do not sell your data. Apart from the advertising measurement disclosure to TikTok described above, we do not share your data with any other third parties. Your data is used only for the services you request.

Desktop App Telemetry

The SnapEasy desktop app processes your Snapchat export entirely on your device. Your photos, videos, and their file names are never uploaded and never leave your machine.

To keep the app reliable, it sends us usage statistics and error reports: things like app version, export success and failure counts, total size processed, and error messages when something goes wrong. These reports never include your files, file names, or file contents, and are associated with your SnapEasy account. They are processed by PostHog (analytics) and Axiom (error diagnostics), listed above, and retained according to their linked policies.

You can turn this off at any time in the app's settings; the app keeps working exactly the same with telemetry disabled.

GDPR Rights (EU Users)

If you are located in the European Union, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data (except legally required records)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data

To delete your account, use Settings in the app. To exercise any other right, contact us at [email protected].

CCPA Rights (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request what personal information we collect about you
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of your personal information. We do not sell data. The TikTok Pixel described above may count as "sharing" for cross-context behavioral advertising under the CPRA; to opt out, choose Decline in our cookie banner or email us at [email protected]

To delete your account, use Settings in the app. To exercise any other right, contact us at [email protected].

Data Minimization

We practice data minimization by:

• Collecting only the information necessary to provide our service
• Automatically deleting files after 48 hours
• Not requiring unnecessary personal information
• Allowing you to delete your account at any time

Security Measures

We implement industry-standard security measures:

• TLS/SSL encryption for all data in transit
• Encryption at rest for all stored data
• Secure password hashing and salting
• Regular security audits and updates
• Restricted access to sensitive data

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

We will respond to your inquiry within 30 days.