Privacy Policy

Introduction

At SnapifyAPI, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our screenshot generation API service. We are committed to protecting your personal information and your right to privacy.

By using SnapifyAPI, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Information You Provide Directly

• Account information when you register
• Payment information for subscription services
• Support communications and feedback

OAuth Authentication Information

When you sign in using third-party OAuth providers (Google, GitHub), we collect:

• Google OAuth: Your email address, name, and profile picture (if publicly available)
• GitHub OAuth: Your email address, name, and profile picture (if publicly available)
• Unique identifier from the OAuth provider

We only request the minimum necessary permissions and do not access your private repositories, contacts, or other sensitive data.

Automatically Collected Information

• API usage data and analytics
• Log information (IP addresses, browser type, access times)
• Performance and error monitoring data
• Device and usage statistics

How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our screenshot API services
• Account Management: To create and manage your user account
• Authentication: To verify your identity and secure your account
• Billing: To process payments and manage subscriptions
• Support: To respond to your inquiries and provide customer support
• Security: To protect against fraud, abuse, and unauthorized access
• Analytics: To understand usage patterns and improve our services
• Legal Compliance: To comply with applicable laws and regulations

What We Do NOT Do

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following limited circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our service (e.g., payment processors, hosting providers)
• Legal Requirements: We may disclose information if required by law or in response to valid legal processes
• Security: We may share information to protect the rights, property, or safety of SnapifyAPI, our users, or others
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred

Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security audits and monitoring
• Access controls and authentication measures
• Secure API key management with SHA-256 hashing
• Regular software updates and security patches

Data Retention

We retain your personal information only for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services and user experience

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your personal information
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@snapifyapi.com

OAuth Provider Compliance

Google OAuth Compliance

Our use of Google user data complies with Google API Services User Data Policy, including the Limited Use requirements. We:

• Only access data necessary for providing our services
• Do not use Google user data for advertising or profiling
• Do not allow humans to read your data unless authorized by you or required for security purposes
• Do not transfer your data to third parties except as disclosed in this policy

GitHub OAuth Compliance

We comply with GitHub's terms of service and privacy requirements:

• We only request the minimum necessary OAuth scopes
• We do not access private repositories or sensitive account information
• We respect GitHub's API rate limits and usage guidelines

Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns (anonymized)
• Improve security and prevent fraud

You can control cookie settings through your browser preferences.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during such transfers, including:

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Certification schemes where applicable

Children's Privacy

Our service is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of our service after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal basis for processing personal information includes:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interest: Processing for our legitimate business interests (security, fraud prevention, service improvement)
• Consent: Where you have provided explicit consent
• Legal Obligation: Processing required to comply with legal obligations