Privacy Policy - Snappalyze

This Privacy Policy explains how Snappalyze collects, uses, discloses, and protects information when you use the Service. By using Snappalyze you consent to the practices described here.

1. Information We Collect

1.1 Account information (via Google OAuth)

When you sign in with Google we receive your name, email address, and profile picture, and we store authentication tokens needed to keep you signed in (short-lived access tokens and revocable refresh tokens).

1.2 Analytics data you connect

When you connect a Google Analytics 4 property, we access — on a read-only basis — analytics data from that property, including: traffic sources and campaign performance, revenue and e-commerce metrics (purchases, orders, refunds, taxes, shipping), product performance, conversion-funnel data, session and engagement metrics, retention and lifetime-value metrics, and aggregated audience demographics (city, country, language, device, gender, age group). This data is synced periodically, cached, and stored to power your dashboards and the AI Analyst.

1.3 Business context you provide

During onboarding and in workspace settings you may answer questions about your business. These answers are processed by AI to generate a natural-language "workspace context" that grounds AI analyses in your business.

1.4 AI chat content and AI memories

We store your conversations with the AI Analyst (your messages, the AI's responses, and related metadata such as timestamps, token counts, and message status). The AI may also store workspace-scoped "memories" — short business-relevant facts derived from your conversations — together with mathematical representations (embeddings) used for retrieval.

1.5 Usage & billing data

We meter AI usage in tokens per workspace and per user, and keep monthly usage history (tokens used, analyses run, data source and user counts). When paid plans launch, payment transactions will be processed by our payment processor; we will not store full payment card details.

1.6 Technical information

We automatically collect IP address, browser and device information, request logs, error reports, cookies (including authentication cookies), and product-usage events. We also maintain internal operational metrics and audit logs of administrative actions.

1.7 Feedback and applications

If you submit feedback, contact us, or apply to the affiliate program, we collect the information you provide in those submissions.

2. How We Use Information

We use information to:

provide, operate, secure, and maintain the Service;
sync and analyze your connected analytics data and render your dashboards;
generate AI responses, summaries, and recommendations grounded in your data and business context;
meter usage, enforce limits, and (in the future) administer subscriptions and billing;
provide support and respond to inquiries;
monitor, detect, and prevent abuse, fraud, and security incidents;
review flagged AI conversations to improve the Service (see Section 3);
comply with legal obligations and enforce our Terms.

3. AI Conversation Monitoring & Human Review

This section describes a practice you should be aware of before using the AI chat:

Our systems automatically scan AI chat conversations for signals of user difficulty or dissatisfaction with the AI assistant — for example, expressions of frustration such as "god damn, do you not understand anything I say?" are flagged as complaint signals.
When a conversation is flagged, authorized Snappalyze personnel may review the conversation (including nearby messages needed for context) to investigate the AI's shortcomings in that exchange.
Findings from these reviews are used to diagnose and correct weaknesses in the AI system and improve response quality — for example by refining prompts, tools, model configuration, and evaluation data.
Access to flagged conversations is restricted to personnel who need it for this purpose.

In addition, conversations may be accessed by authorized personnel when necessary to investigate suspected Terms violations, abuse, or security incidents, to comply with legal obligations, or when you explicitly request support on a conversation.

If you share a conversation via a public share link, anyone with the link can view it (system messages excluded).

4. How We Share Information

We do not sell your personal information. We share information only with:

AI/LLM providers — your chat messages and relevant context (portions of analytics data, workspace context, and memories) are sent to third-party large-language-model providers to generate AI responses.
Google — to authenticate you and to retrieve your GA4 data via Google APIs, subject to Google's terms. Our use of Google user data complies with the Google API Services User Data Policy, including Limited Use requirements.
Infrastructure providers — cloud hosting, database, caching, and monitoring vendors that process data on our behalf under contractual safeguards.
Payment processors — when paid plans launch (currently planned: PayPal), to process payments and verify transactions.
Legal & safety — when required by law, legal process, or to protect the rights, safety, or property of Snappalyze, our users, or the public.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data Retention

Account, workspace, and analytics data are retained while your account is active.
Deletions in the product are generally soft deletes first (data is marked deleted and hidden) followed by permanent removal in the ordinary course of operations.
Chat conversations and memories are retained to provide cross-conversation continuity; you may request deletion.
Usage and billing history may be retained as required for accounting and legal purposes.
Logs and audit records are retained for security and operations for limited periods.

To request deletion of your account or specific data, email support@snapplyze.ai.

6. Security

We implement technical and organizational measures including: TLS encryption in transit; hardened HTTP security headers and a strict content-security policy; OAuth-based authentication with short-lived access tokens and revocable refresh tokens; role-based access control at the system and workspace level; input validation on all API endpoints; rate limiting; encryption utilities for sensitive values; hashing of share tokens; webhook signature verification; and audit logging of administrative actions. No system is perfectly secure — we cannot guarantee absolute security.

7. International Data Transfers

Our infrastructure and service providers may be located in the United States and other countries. By using the Service you understand your information may be transferred to and processed in countries with different data-protection laws than your own. Where required, we rely on appropriate safeguards for such transfers.

8. Your Rights

Depending on your jurisdiction (e.g., GDPR in the EEA/UK, CCPA/CPRA in California), you may have rights to:

access the personal information we hold about you;
correct inaccurate information;
delete your information;
export your information in a portable format;
object to or restrict certain processing;
withdraw consent where processing is based on consent (e.g., by disconnecting your Google account);
non-discrimination for exercising your rights.

To exercise any of these rights, contact support@snapplyze.ai. We will respond within the timeframe required by applicable law. You may also lodge a complaint with your local supervisory authority.

9. Cookies

We use cookies and similar technologies for authentication (keeping you signed in), security, and understanding product usage. Essential cookies cannot be disabled without breaking sign-in. Browser settings can restrict non-essential cookies.

10. Children's Privacy

The Service is not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us personal information, contact us and we will delete it.

11. Free Period & Future Billing Data

The Service is currently free. When subscriptions launch (planned tiers by user type — e.g., Brand and Agency — plus optional token add-ons; not yet finalized), we will begin processing billing-related information through our payment processor and will update this Policy accordingly before launch.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced through the Service or by email, and the "Last updated" date will change. Continued use after changes take effect constitutes acceptance.

13. Contact Us

For privacy questions, requests, or complaints:

Email: support@snapplyze.ai

Website: https://snapplyze.ai