SnapList Privacy Policy

SnapList ("we", "us", "our") operates the SnapList application (the "Service"). This page explains how we collect, use, and protect information when you use the Service.

1. Information We Collect

Account Information: Email address, authentication credentials, and account settings.

Item Data: Photos you upload, listing drafts, item specifics, pricing inputs, and inventory records.

Marketplace Data: If you connect a marketplace account, we store authorization tokens needed to perform actions you approve (such as creating listings).

Usage Data: Product usage, diagnostics, and error telemetry used to operate, secure, and improve the Service.

2. How We Use Your Information

• Provide core features such as item analysis, listing draft generation, and publishing workflows
• Operate account security, fraud prevention, and platform reliability
• Process billing and subscription workflows when applicable
• Respond to support requests and product communications
• Improve quality, speed, and accuracy of the Service

3. Third-Party Tools

We use third-party tools and infrastructure providers to run SnapList. Depending on feature usage, these providers may process account data, item data, listing payloads, usage diagnostics, and payment metadata on our behalf under contractual safeguards. The current list of subprocessors is:

• Supabase: Database, authentication, and file storage. Processes account credentials, item records, photos, and session tokens.
• Vercel: Hosting, serverless function execution, and edge networking. Processes HTTP request metadata and runtime logs.
• Stripe: Subscription billing and payment processing. Processes billing email, payment method details, and invoice metadata. SnapList does not see or store full card numbers.
• Resend: Transactional and notification email delivery. Processes recipient email, message content, and delivery metadata.
• Sentry: Error monitoring and crash reporting. Processes stack traces, browser/device metadata, and a coarse user identifier for grouping.
• OpenAI: AI-powered item analysis, listing generation, and pricing helpers. Processes the item photos and text fields you submit for analysis.
• Shippo: Shipping rates and label generation. Processes ship-from and ship-to addresses, parcel dimensions, and order references when you create a label.
• eBay: Marketplace listing and order management. Processes listing payloads, OAuth tokens, and order details on your authorized eBay account.

We require each processor to meet baseline security and confidentiality obligations. We may add or change processors as the product evolves; material changes will be reflected here. View full sub-processors list →

4. Data Retention

• Account and item data are retained while your account remains active.
• You can delete individual items at any time.
• If you delete your account, associated data is deleted within a reasonable operational window.

5. Data Security

• Data in transit is protected with industry-standard encryption.
• Sensitive credentials and tokens are protected at rest.
• Access controls are enforced to prevent unauthorized account access.
• Security monitoring and logging are used to detect abuse and system issues.

6. Your Rights

You may request access, correction, export, or deletion of your personal data, subject to legal and operational requirements.

7. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights with respect to your personal information:

• Right to know: request the categories and specific pieces of personal information we have collected about you, the sources, and the purposes of collection.
• Right to correct: ask us to correct inaccurate personal information that we maintain about you.
• Right to delete: ask us to delete personal information we have collected from you, subject to lawful exceptions.
• Right to opt out of sale or sharing: ask us not to sell or share your personal information.
• Right to non-discrimination: we will not deny services, charge different prices, or provide a different level of quality because you exercised any of these rights.

SnapList does not sell your personal information,and we do not share it for cross-context behavioral advertising. Because we do not engage in those activities, we do not need to display a separate “Do Not Sell or Share My Personal Information” link, but you can confirm or exercise any of the rights above by contacting us at privacy@snaplist.us. We will verify the request using your account email and respond within the timeframes required by law.

8. Children's Privacy

SnapList is intended for users who are 18 years of age or older and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us at privacy@snaplist.us and we will delete the information from our systems. Parents and guardians who have questions about a minor's account can also reach us at the same address.

9. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@snaplist.us.

Last updated: April 28, 2026