This Privacy Policy explains how Orviq Technologies, trading as Snap It ("Snap It", "we", "us"), collects and uses personal data through the Snap It website, account service, and native macOS and Windows applications.
Who controls your data
Orviq Technologies is the controller of account, subscription, support, security, and website data described below. For privacy requests, email contact@hellosnapit.com. Our registered business address and applicable data-protection registration details will be published before commercial launch.
Data we process
- Account data: name, email address, password hash, verification status, account identifiers, plan, and session records.
- Billing data: Stripe customer, price, subscription, and status identifiers. We do not receive complete card numbers.
- Product telemetry: successful request counts, voice-session counts, app version, operating system, error category, and security events. Snap It is designed not to place prompts, transcripts, screenshots, audio, or API keys in analytics logs.
- Support data: messages and attachments you choose to send to us.
- Screen and voice context: only when you invoke a Snap It feature that needs it, as described below.
Screen, accessibility, and microphone context
Snap It does not continuously upload your screen. When you activate a screen-aware feature, the app captures the active display context and relevant accessibility metadata needed for that request. When you activate voice mode, it records the audio needed to transcribe that turn. The app may temporarily hold this information in memory while completing the request. Snap It is designed not to save raw screenshots or microphone recordings to disk or to our account database.
The app attempts to mask certain sensitive patterns before visual processing, but automated masking is not guaranteed. Do not invoke Snap It while secrets, health records, payment details, private keys, or other highly sensitive material are visible unless you are comfortable sending that context to your selected AI provider.
Your Gemini API key and AI processing
Snap It uses a bring-your-own-key model. Your Gemini API key is stored in macOS Keychain or Windows Credential Manager and is not sent to the Snap It account service. Screen context, voice input, accessibility context, and prompts required for an AI request are sent directly from your device to Google under your Google account, API project, quota, billing, and data terms. Removing Snap It does not revoke your Google key; revoke or rotate it in Google AI Studio when necessary.
Why we process data
- To create and secure your account, provide downloads, and deliver requested product features under our contract with you.
- To process subscriptions and maintain billing records under our contract and legal obligations.
- To prevent abuse, investigate incidents, protect users, and improve service reliability based on our legitimate interests.
- To send marketing only with consent where consent is required. You may opt out at any time.
- To comply with tax, accounting, consumer-protection, and lawful government requirements.
Required information and automated decisions
An email address, password, and verification state are required to create and secure an account. Billing information is required only for a paid plan. If you do not provide required account information, we cannot create the account or provide protected downloads. Snap It does not use account data to make solely automated decisions that produce legal or similarly significant effects. AI responses and proposed computer actions are product outputs for you to review, not decisions about your eligibility, employment, credit, health, insurance, or legal rights.
Website cookies
The website uses an essential HTTP-only session cookie to keep signed-in users authenticated and temporary session storage during verification or password reset. We do not currently use advertising or cross-site behavioural tracking cookies. Read the Cookie Policy for details.
Who receives data
We share only what is needed with service providers supporting account hosting, transactional email, security monitoring, customer support, and payments. Stripe processes payment information. Google processes AI requests made with your Gemini key. We may disclose information where required by law, to protect legal rights and safety, or as part of a corporate transaction subject to appropriate safeguards. We do not sell personal data or use screen or microphone content for advertising.
International transfers
Our providers may process data outside your country. Where required, we rely on adequacy decisions, approved contractual safeguards, or another lawful transfer mechanism. Provider locations and safeguards will be recorded in our production subprocessor register.
Retention
- Raw screen captures and microphone audio: not intentionally retained by Snap It after the request completes.
- Account and entitlement data: while the account is active and normally no longer than 30 days after verified deletion, except required legal records.
- Authentication challenges: until used or expired, then removed under operational retention schedules.
- Security and operational logs: normally up to 90 days, unless needed to investigate an incident.
- Billing and tax records: for the period required by applicable law.
- Support correspondence: normally up to 24 months after the matter closes.
Account deletion and data export
You may request account deletion from Snap It settings or by emailing contact@hellosnapit.com from your account email. Deletion removes or anonymizes account records that are no longer needed to provide the service, handle security, resolve disputes, or meet legal accounting and tax duties. Deleting Snap It does not delete your Google AI Studio project, Gemini API key, Stripe records held by Stripe, or provider-side logs controlled by Google.
You may request a portable export of account data we control, including profile, plan, subscription identifiers, and usage counters. Snap It cannot export screenshots, audio, prompts, Gemini responses, or customer API keys because the BYOK production service is designed not to receive or store them.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to withdraw consent. Email contact@hellosnapit.com to exercise privacy rights. We may verify your identity before completing a request. You may also complain to your local data-protection authority; UK users may contact the Information Commissioner's Office.
We do not discriminate against users for exercising applicable privacy rights, and we do not sell or share personal information for cross-context behavioural advertising.
Security
We use encrypted transport, hashed passwords, hashed session tokens, refresh-token rotation, short-lived access tokens, rate limits, restricted credential stores, authenticated local IPC, signed release processes, and least-privilege automation controls. No system is completely secure. Report suspected vulnerabilities to contact@hellosnapit.com.
Children
Snap It is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect a child's personal data without the authorization required by law.
Changes
We may update this policy as the product or law changes. We will update the effective date and provide additional notice when a material change requires it.
Contact
Orviq Technologies, trading as Snap It
Privacy: contact@hellosnapit.com
General support: contact@hellosnapit.com