Privacy Policy

This Privacy Policy explains how Joel Oliver, operating as SnoutData ("SnoutData", "we", "us", or "our") collects, uses, and shares personal data when you use the SnoutData account and billing website at snoutdata.com and the SnoutData desktop application (together, the "Service"). It also explains your rights, including your right to delete your account and data.

1. Data we collect

• Account identity. When you sign in with Google or GitHub, we receive your email address and basic profile information (such as your name and avatar image) from that provider.
• Billing data. When you buy a paid plan, our payment processor (Stripe) collects and processes your payment details. We do not store your card number. We store a Stripe customer identifier, a subscription identifier, your subscription status, the current period end date, and the price you are on.
• Plan data. We store your current plan tier (Free, Plus, or Pro).
• AI usage data. When you use AI features, we record usage and spend against your plan's quota so we can meter and display your remaining allowance.
• Technical data. Like most online services, our infrastructure providers process limited technical data (such as IP address and request logs) needed to operate and secure the Service.

2. How we use data

• to authenticate you and provide access to the Service;
• to determine your plan and the features and AI quota it unlocks;
• to process payments, renewals, and cancellations;
• to meter and display your AI usage;
• to provide support and respond to your requests;
• to secure the Service and prevent abuse; and
• to comply with our legal, accounting, and tax obligations.

3. Service providers we share data with

We use the following processors to run the Service. Each processes personal data only as needed to provide its part of the Service:

• Supabase, for authentication, database hosting, and storing your profile and plan record.
• Stripe, for payment processing, subscriptions, invoicing, and the billing portal.
• Google and GitHub, as the identity providers you choose to sign in with.
• Our AI gateway and the underlying AI model providers, which process the prompts and context you send when you use AI features in order to generate a response. Under the terms of our agreements, these providers do not use your prompts or the responses to train their models. See Section 4 for how we handle AI data.

We do not sell your personal data. We may disclose data if required by law, to protect our rights, or in connection with a business transfer.

4. AI prompts and your data

When you use the AI assistant, the App sends your prompt together with relevant context, which can include parts of your database schema and query results, to our AI gateway so a model can generate a response. We treat this content as confidential to you. We do not store the content of your prompts or the assistant's responses on our servers, and we do not use them to train models. Our gateway records only request metadata needed to operate and bill the Service, such as the model used, token counts, timestamp, and the usage associated with your account. It does not retain the text of your prompts, your schema, your data, or the assistant's replies.

Your chat history is stored locally on your own device, not on our servers. You can delete it at any time from within the App.

Some models are served by third party AI providers that process your prompt only to generate a response. Under the terms of our agreements with these providers, they do not use your prompts or the assistant's responses to train their models and do not share that content with others. Models we host locally never leave our infrastructure. If you provide your own model provider key, your prompts are sent directly to that provider and bypass our gateway entirely, subject to that provider's terms.

5. Legal bases for processing

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of our contract with you (to provide the Service and process your plan); our legitimate interests (to secure, improve, and operate the Service); your consent (where required, for example for certain optional features); and compliance with legal obligations (such as keeping financial records).

6. Data retention

We keep your account data for as long as your account is active. When you delete your account, we permanently and irreversibly delete your login identity, your profile and plan record, your AI usage records (which are metering metadata only, never the content of your prompts or chats), and your synced application settings, and we cancel any active subscription immediately. Aside from the billing records described below, we do not retain a copy of your personal data after your account is deleted.

Some records are retained after deletion. In particular, our payment processor retains historical billing records (such as invoices and payment records, which may include your name, email, and transaction amounts) for the period required to meet accounting, tax, and legal obligations. These records are kept by the processor and are not removed by deleting your account.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. You can permanently delete your account and the personal data described above at any time, yourself, from your account dashboard. To exercise any other right, contact us at [email protected]. We will not deny you service or treat you differently for exercising your privacy rights. Region specific rights are described below.

8. European Economic Area and United Kingdom (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights granted by the GDPR and equivalent UK law, including the right to access, rectify, and receive a portable copy of your personal data, to restrict or object to processing, and to erasure of your personal data (the "right to be forgotten"). You can exercise the right to erasure yourself at any time by deleting your account from your dashboard, which permanently removes your login identity, your profile and plan record, your AI usage records, and your synced application settings, and cancels any active subscription. The only data kept afterward is the limited billing record our payment processor must retain for accounting, tax, and legal purposes, as described in Section 6. You also have the right to lodge a complaint with your local data protection authority.

9. California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to know what personal information we collect and how we use and disclose it, the right to delete the personal information we hold about you, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising these rights. We do not sell your personal information, and we do not share it for cross context behavioral advertising, so there is nothing to opt out of in that respect. You can delete your account and the personal information described in this policy at any time from your account dashboard, or contact us at [email protected] to exercise any of these rights.

10. International transfers

We and our processors operate in the United States and may process your data there and in other countries. Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses offered by our processors.

11. Security

We use measures intended to protect your data, including encrypted connections, access controls, and row level security on our database so that you can only read your own profile. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children

The Service is not directed to children, and you must be at least 16 years old to use it. We do not knowingly collect personal data from children below that age.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

14. Contact

For privacy questions or to exercise your rights, contact us at [email protected]. The data controller is Joel Oliver, operating as SnoutData, a sole proprietor based in Toronto, Ontario, Canada.