Privacy Policy

SnapScreens ("we", "us") operates the SnapScreens Suite: SnapScreens Studio, SnapCover and SnapScript, available as desktop applications, a web application and mobile companion apps.

Data controller: SnapScreens©

Contact for privacy matters: support@snapscreens.com.

Note: SnapScript for iOS has its own separate Privacy Policy on its App Store page, covering on-device speech recognition and iOS permissions. This policy covers the SnapScreens Suite and the snapscreens.com website.

ACCOUNT DATA: email address, password hash and authentication metadata. Required to create and access your account. Legal basis: Article 6(1)(b) GDPR (performance of a contract).

PROFILE DATA: display name, company, country, language and profile picture, if you choose to provide them. Optional; used to personalise the app. Legal basis: Article 6(1)(b) GDPR.

PROJECT CONTENT: screenshots, captions, ASO listings, keywords and project metadata you create. Stored locally and, when you are signed in, synchronised to your account so you can access it from other devices. Legal basis: Article 6(1)(b) GDPR.

AI USAGE DATA: credit balance and a ledger of AI operations (type of operation, credits spent, timestamp). Needed to run the credit system. Legal basis: Article 6(1)(b) GDPR.

SUBSCRIPTION DATA: plan, status and renewal date. Received from our payment provider. Legal basis: Article 6(1)(b) GDPR.

TECHNICAL LOGS: IP address, request time and error information, kept for security and abuse prevention. Legal basis: Article 6(1)(f) GDPR (legitimate interest in keeping the service secure).

ACCOUNT, PROFILE, PROJECTS AND CREDITS: hosted by our cloud infrastructure provider, on servers located in Ireland, European Union.

AI PROCESSING: requests are routed through our AI proxy to model providers, which may process them outside the European Economic Area.

TRANSACTIONAL EMAIL: sent through a specialised email provider, for account confirmation and password resets.

PAYMENTS: handled by a Merchant of Record. Payment card details never reach our systems.

LOCAL COPIES: the desktop and mobile apps keep a local copy of your projects on your device, so you can work offline. Uninstalling the app does not automatically delete that local data.

When you use an AI feature (captions, ASO listings, keyword research, translations), the text you provide is sent to our AI proxy and forwarded to a model provider to generate the result.

WHAT WE STORE: we record that an operation happened and how many credits it cost. We do NOT store the content of your prompts or the generated results on our servers. Operational logs record the model used and response time, not your text.

MODEL PROVIDERS: prompts are processed by third-party AI model providers. Depending on the operation and on availability, more than one provider may be used. Processing may occur outside the European Economic Area.

NO TRAINING BY US: we do not use your prompts or outputs to train any model, and we do not sell or share them.

WHAT THE PROVIDERS DO: model providers process your requests under their own terms and data processing agreements, linked in section 5. Providers typically log prompts for a limited period for safety and abuse detection. We access AI models through paid, business-tier arrangements, which are governed by the providers' data processing terms rather than their consumer terms. We cannot, however, guarantee the internal practices of third parties: what we can state is what leaves our systems and what we ourselves retain.

PLEASE NOTE: do not paste personal data, credentials or confidential third-party information into AI fields. The text you submit leaves your device and is processed by the providers above.

ADVANCED USERS: if you configure your own API key for an external provider, that key is stored in your device's secure storage and requests go directly from your device to that provider, without passing through our servers. In that case the provider processes your data under your own account and terms.

We rely on a small number of specialised providers to operate the service. Each acts as our processor under Article 28 GDPR and is bound by a data processing agreement, except our payment provider, which acts as an independent controller for the sale itself.

CLOUD INFRASTRUCTURE — authentication, database and file storage. Servers located in Ireland, European Union.

AI MODEL PROVIDERS — process the text you submit to AI features and return the generated result. Processing may occur outside the European Economic Area. We use business-tier arrangements governed by the providers' data processing terms.

PAYMENT PROVIDER — a Merchant of Record that handles payment, VAT and invoicing. Based outside the European Economic Area.

TRANSACTIONAL EMAIL PROVIDER — sends account confirmation and password reset messages.

Our primary data store is in the European Union. Where a provider operates outside the EEA, transfers are covered by the European Commission's Standard Contractual Clauses and the providers' own safeguards.

You have the right to ask for the specific identity of these recipients. Write to support@snapscreens.com and we will tell you which providers process your data and where.

We use a Merchant of Record for subscriptions and credit purchases. They process payments, handle VAT and tax compliance, and issue invoices on our behalf. Their identity and terms are shown at checkout.

SnapScreens never sees, receives or stores your credit card or payment details.

From them we receive your email address, name and the details of your plan, used to activate your subscription, credit your account and provide support.

Their privacy terms are linked during the checkout process, before you complete a purchase.

Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (legal obligation, for invoicing and accounting records).

The SnapScreens applications contain no advertising SDK, no behavioural analytics and no third-party tracking.

The snapscreens.com website keeps minimal server-side logs (IP, page requested, referrer) for security purposes. We do not use Google Analytics, Facebook Pixel or similar profiling tools.

We do not sell or share your personal data with third parties for marketing purposes.

Our main data store is located in the European Union. Some of our processors operate globally and may process data outside the EEA.

Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses and by the processors' own safeguards. This applies in particular to AI processing, payments and transactional email.

You may request further information about these safeguards at support@snapscreens.com.

ACCOUNT, PROJECTS AND PROFILE: retained while your account is active. If you delete your account, they are removed from our systems.

AI CREDIT LEDGER: retained together with your account, to keep an accurate balance and history.

PURCHASE AND INVOICING RECORDS: retained for the period required by tax law, currently 10 years in Italy, even after account deletion. This is a legal obligation and cannot be waived by deletion requests.

TECHNICAL LOGS: retained for a limited period for security purposes, then deleted.

LOCAL DATA ON YOUR DEVICE: entirely under your control. Deleting your account does not remove local copies from your computer.

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interest.

ACCESS AND RECTIFICATION: most of your data is visible and editable directly in the app, under Account.

ERASURE: you can delete your account from the app, under Account → Advanced → Delete account. This removes your profile, projects, credits and account. Invoicing records are retained where tax law requires it.

OTHER REQUESTS: write to support@snapscreens.com. We reply within 30 days.

If you believe your data has been mishandled, you have the right to lodge a complaint with the data protection authority of the EU country where you live, where you work, or where the alleged infringement took place.

The full list of national authorities is published by the European Data Protection Board: edpb.europa.eu/about-edpb/about-edpb/members_en

Access to your data is protected by authentication and by row-level security rules, so that each account can only read and write its own records.

Data is encrypted in transit. Our AI proxy verifies your session before processing any request and never exposes provider credentials to the client.

No system is completely secure. If a breach affecting your personal data occurs, we will notify the competent authority and, where required, affected users, in line with Articles 33 and 34 GDPR.

SnapScreens is a professional tool and is not directed at children. You must be at least 16 years old, or the minimum age required in your country, to create an account.

AI features generate their output automatically. These outputs are suggestions for marketing copy and assets: they do not produce legal effects concerning you and do not significantly affect you within the meaning of Article 22 GDPR.

You remain in control: you decide whether to use, edit or discard any generated result before publishing it.

If you have concerns about an automated output, write to support@snapscreens.com and we will review it.

We may update this Privacy Policy when the service changes or when required by law. Material changes will be announced by email to registered users. The date at the top of this page shows when it was last updated.