Privacy Notice
Last updated: May 25, 2026
Short version: we don't keep your photos. Below is the full notice for completeness.
1. Who we are
SnapTags is operated by Willie Ford Brown Jr ("SnapTags", "we", "us"), acting as the data controller for personal data processed through getsnaptags.com. Contact: snaptagssupport@gmail.com.
2. What we collect and why
| Category | Purpose | Legal basis |
|---|---|---|
| Email, password (hashed) | Create and secure your account | Contract |
| Photos you upload | Generate captions and hashtags (processed in real time, not stored on our servers) | Contract |
| Usage counters, IP address | Rate limiting, security, fraud prevention | Legitimate interests |
| Subscription status (no card data — see §4) | Provide paid features, customer support | Contract |
| Support emails | Respond to your inquiries | Legitimate interests |
| Service-level email notifications | Send transactional emails (password reset, payment issues) | Contract |
We do not set advertising or analytics tracking cookies. Only essential cookies needed to keep you signed in are used.
3. Photos
Photos you analyze are sent securely to our AI provider (Google Gemini, via the Lovable AI Gateway) for the duration of a single request and are not stored on our servers. The most recent results (caption + hashtags) are cached in your browser's localStorage; clearing your browser data removes them.
4. Who we share data with
- Paddle.com Inc. — our Merchant of Record. Paddle processes all payments, handles billing, tax compliance, invoicing, refunds, and subscription management. Paddle collects payment method details directly from you; we never see or store your full card number. See Paddle's privacy notice.
- Supabase Inc. — hosting, authentication, and database for account and subscription data.
- Google (Gemini API, via Lovable AI Gateway) — AI provider that generates captions/hashtags from your photos. Requests are transient and not used to train models.
- Cloudflare — edge hosting and DDoS protection.
- Email delivery provider — to send transactional emails (password reset, payment failure notices).
- Authorities — where required by law (e.g. valid legal request).
5. International transfers
Our providers are based in the United States and may process data outside the UK/EEA. Where applicable we rely on Standard Contractual Clauses or equivalent safeguards.
6. How long we keep data
- Photos: not stored on our servers (transient processing only).
- Account data: kept while your account exists, then deleted within 30 days of account closure.
- Subscription / billing records: retained as long as legally required (typically up to 7 years for tax purposes, held by Paddle).
- Rate-limit counters and security logs: up to 90 days.
- Support emails: up to 2 years from last correspondence.
7. Your rights
Depending on your jurisdiction (including under UK and EU GDPR, and the California Consumer Privacy Act), you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion ("right to be forgotten");
- request restriction of processing;
- data portability (receive a copy in a portable format);
- object to processing based on legitimate interests;
- withdraw consent at any time where processing is consent-based;
- lodge a complaint with your local data protection authority.
To exercise any of these rights, email snaptagssupport@gmail.com. We respond within one month.
8. Security
We apply appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest for stored account data, access controls, row-level security on our database, and regular security reviews. No system is perfectly secure — please use a strong, unique password.
9. Children
SnapTags is not intended for users under 13 (or the minimum age in your jurisdiction). We don't knowingly collect data from children. Contact us if you believe a child has provided us with personal data.
10. Changes
We may update this notice. Material changes will be reflected by updating the "last updated" date above.