Privacy Policy

Last updated: July 3, 2026

1. Who We Are

Snapi is an AI work intake and execution platform operated from Canada. If you have any privacy questions, you can reach us at our contact form.

2. What Data We Collect

Account information

When you register, we collect your name and email address. If you invite team members, we collect their email addresses too. We store your hashed password (we never store your actual password in plain text).

Organizational data

Everything you create inside Snapi — form schemas (entities), submission records, uploaded files, kanban boards, comments, API keys — is stored on our servers. This data belongs to you.

If you embed a public form on your website, data submitted through that form by your visitors is also stored in your Snapi workspace. You are responsible for ensuring your visitors are aware that their data is being collected.

Usage data

We collect server logs that include request timestamps, IP addresses, HTTP methods, response codes, and basic browser/client information. These logs help us diagnose problems and protect against abuse. We retain logs for 90 days.

Billing data

We do not store your payment card details. Billing is handled entirely by Paddle, our payment processor. Paddle is the Merchant of Record. The data Paddle collects (card number, billing address) is governed by Paddle's privacy policy. Snapi only receives a subscription status and plan identifier from Paddle.

3. How We Use Your Data

• To provide the service — storing and displaying your forms, records, boards, and files.
• Transactional emails — account confirmation, password resets, invite links, and billing notifications. We don't send marketing emails unless you opt in.
• Security and abuse prevention — monitoring for unusual activity, enforcing plan limits, and protecting other users.
• Product improvement — aggregate, anonymized usage patterns (e.g. "X% of users create a board within the first session") help us improve the product. Individual data is never used for this.

We do not use your data to train AI or machine learning models. We do not sell your data. Period.

4. Who We Share Data With

We share data with a small number of third parties only where necessary to operate the service:

• Paddle — billing and subscription management. Paddle (headquartered in the UK) receives your email address and subscription details. Payment card data is handled exclusively by Paddle and is not accessible to Snapi. Paddle may process payment data in the United Kingdom, United States, and other countries where Paddle operates. This processing is governed by Paddle's privacy policy and appropriate cross-border transfer mechanisms including Standard Contractual Clauses.
• Hosting providers — the servers that run Snapi are hosted by infrastructure providers. Data is stored on servers located in Canada.
• Webhook endpoints you configure — if you set up pre- or post-submission webhooks, your form data is sent to the URLs you specify. Those endpoints are under your control, not ours.

We do not share data with advertisers, analytics platforms, or data brokers.

5. AI Agent Access

If you create API keys and give them to AI agents, those agents can read and write data in your workspace on your behalf. Snapi does not control what those agents do with the data they access. Manage your API keys carefully and revoke any that are no longer needed.

6. Data Retention

Your account data is retained for as long as your account is active. If you delete your account, we delete your data within 30 days. Anonymized aggregate statistics derived from your usage may be retained indefinitely, but they cannot be traced back to you.

We may retain data longer if required by law or to resolve disputes.

7. Security

All data in transit is encrypted via HTTPS/TLS. Data at rest is stored in a SQLite database on a secured server with access controls. We take reasonable precautions to protect your data, but no system is 100% secure. If we discover a breach that affects your data, we'll notify you promptly.

8. Cookies

Snapi uses a minimal number of cookies:

• Authentication token — a JWT stored in your browser to keep you logged in. This is a functional cookie, not a tracking cookie.

We do not use third-party tracking cookies, advertising pixels, or analytics cookies. There is nothing to opt out of beyond the functional auth cookie, which is required for the app to work.

9. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate information (most of this you can do directly in the app)
• Deletion — request deletion of your account and data
• Portability — request an export of your data in a machine-readable format
• Objection — object to certain processing of your data

To exercise any of these rights, email our contact form. We'll respond within 30 days.

10. GDPR and PIPEDA

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR). Our lawful basis for processing your data is the performance of the contract between you and Snapi (i.e., providing the service you signed up for).

If you are located in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

For GDPR inquiries or to lodge a complaint, contact our contact form. You also have the right to lodge a complaint with your local data protection authority.

11. Children

Snapi is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has created an account, please contact us and we'll remove it.

12. Changes to This Policy

If we make material changes to this policy, we'll notify you by email at least 14 days before they take effect. The "last updated" date at the top of this page will always reflect when it was last revised.

13. Contact

Privacy questions or concerns: our contact form