Privacy Policy

Last updated: May 6, 2026

This Privacy Policy explains how Snap For Sale, Inc. ("Snap for Sale," "we," "us") collects, uses, retains, and shares information when you use our website at snapforsale.app and related services (the "Service"). We are a Delaware corporation; our primary contact is support@snapforsale.app.

1. Information we collect

Account information

  • Email address and password hash (managed by our authentication provider, Supabase).
  • If you sign in with Google or Apple, the OAuth provider ID and basic profile fields they share.
  • An optional 4-character invite code you enter at signup.

Content you submit

  • Product photos you upload for analysis. Images are stored in Supabase Storage under a path tied to your account ID and analysis ID. URLs are not publicly indexed.
  • Edits you make on the result page (corrected product name, brand, model, category, notes) when you re-run analysis.
  • Optional product feedback (accurate / inaccurate, free-text comments).

Usage and device data

  • Your IP address (from the x-forwarded-for header), saved alongside each analysis to help us detect abuse and rate-limit unusual traffic.
  • Analysis pipeline logs — event names, step durations, and metadata such as AI-confidence levels. Used for performance monitoring and debugging.
  • Marketing attribution stored in your browser's localStorage under the key sfs_attribution for up to 30 days: utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, landing path, and referrer.

Payment information

Card details are collected and processed directly by Stripe. We never see or store your full card number. We retain Stripe customer IDs and subscription IDs to apply credits and handle refunds.

2. How we use your information

  • To run product recognition, multi-platform price search, and scoring.
  • To process payments and manage your credit balance and subscription.
  • To improve recognition accuracy and platform coverage.
  • To detect, investigate, and prevent abuse, fraud, and security incidents.
  • To measure marketing performance and serve relevant ads via Google Ads.
  • To respond to your support requests.

3. Third-party service providers

We share the minimum information necessary with the following processors. Each acts on our instructions under a data-processing agreement.

  • Google Gemini — image recognition, translation, and relevance classification.
  • TMAPI — search across 1688, Amazon US, and Alibaba International.
  • JustOneAPI — search across Taobao and TikTok Shop.
  • eBay Buy API — search across eBay listings.
  • Datafiniti — aggregated retail price data from Walmart, Target, Best Buy, Newegg, and others.
  • Frankfurter API (European Central Bank reference rates) — currency conversion between USD and CNY.
  • Stripe — payment processing, subscription billing, refunds.
  • Supabase — authentication and database.
  • Vercel — application hosting and deployment.
  • Google Analytics 4 — usage analytics.
  • Microsoft Clarity — session replay and behavioral analytics.
  • Google Ads — conversion measurement and remarketing.

4. How long we keep your data

  • Uploaded images and analyses: kept for the lifetime of your account. When you delete your account (see Section 6), they are removed from our storage.
  • Analysis pipeline logs: up to 90 days, then purged.
  • Marketing attribution (sfs_attribution): 30 days from the moment we first see a UTM or referrer.
  • Search and identification caches: Gemini identification ~30 days; retail/supply queries 48 hours; currency exchange rates 12 hours.
  • Payment records: retained as long as required by tax and accounting law, typically 7 years in the US.

5. Cookies and tracking

The following cookies and storage keys may be set when you visit Snap for Sale:

  • Google Analytics 4: _ga, _gat, _gid (analytics).
  • Microsoft Clarity: _clck, _clsk (session replay).
  • Google Ads: _gcl_au, _gcl_aw (ad attribution).
  • Browser localStorage key sfs_attribution (marketing attribution).

You can clear cookies and localStorage from your browser at any time, or use your browser's "Do Not Track" / Global Privacy Control signal — we honor GPC as an opt-out of sharing for cross-context behavioral advertising under CCPA.

6. Your rights — California (CCPA / CPRA)

California residents have the right to know, delete, correct, and limit the use of sensitive personal information. We do not sell your personal information for monetary consideration. We do share certain identifiers with Google Ads for advertising measurement, which California law treats as "sharing" — you can opt out by sending us a request or by enabling Global Privacy Control.

To exercise any right, email support@snapforsale.app from the address on your account. We will respond within 45 days.

7. Your rights — EEA / UK (GDPR)

If you are in the EEA or UK, our legal bases are: performance of a contract (running your account and analyses), legitimate interest (analytics, security, abuse prevention), and consent (where local law requires it for advertising cookies).

You may request access, rectification, erasure, restriction, portability, or object to processing, and you may lodge a complaint with your local supervisory authority. Some of our processors are located in the United States; we rely on the EU–US Data Privacy Framework and Standard Contractual Clauses for cross-border transfers.

8. Children's privacy

Snap for Sale is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact support@snapforsale.app and we will delete it.

9. Security

We use HTTPS for all traffic, store passwords as hashes via Supabase, and rely on Stripe (PCI DSS Level 1) for payment data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we work to remediate vulnerabilities promptly.

10. Changes to this policy

We may update this policy. Material changes will be posted here with a new "Last updated" date and, where appropriate, communicated via email or in-app notice at least 30 days before they take effect.

11. Contact

Snap For Sale, Inc. — Delaware, USA. For privacy questions, data access, deletion requests, or to request our mailing address, email support@snapforsale.app.

Privacy Policy | Snap.ai