Privacy Policy
This policy explains what personal data Snappatar handles, why, and where it goes. Short version: we store your email and your saved projects so you can sign in and continue your work; everything you generate is processed by the AI provider you use through your own key; we do not sell data and we do not run advertising.
1. Who is responsible
The Service is operated from Sweden. Contact for all privacy matters: hey@snappatar.com.
2. What we store and why
| Data | Where | Why | Kept |
|---|---|---|---|
| Email address, password hash or sign-in provider, sign-in timestamps | Supabase (authentication) | To create and secure your account | Until you delete your account |
| Saved projects: node graph with prompts, settings and references (images, voice clips) you attached | Supabase (database, per-user row security) | To save your work and open it on any device | Until you delete the project or account |
| Free-model usage counter (requests per day) | Supabase | To enforce the daily limit of the free model | Rolling, days |
| Your fal.ai API key | Your browser only (localStorage) | Sent with each request so fal.ai bills your account | Until you clear it |
| Server logs (IP address, request path, errors) | Vercel | Operating and debugging the Service | Short, per Vercel's retention |
3. Where your content goes
When you generate, your prompt, references and settings are sent to the model provider: fal.ai for paid models, and Pollinations for the free image model. Reference clips and images may be uploaded to fal.ai's storage to make them reachable by the models. Their handling of that data is governed by their own policies. Snappatar does not use your content to train anything.
4. Legal basis
We process account data to perform the contract with you (providing the Service), usage counters and logs on the basis of our legitimate interest in running a stable, abuse-free Service, and anything else only with your consent.
5. Cookies and local storage
We use no advertising or analytics cookies. Supabase sets a session token so you stay signed in. Your browser's local storage holds your API key, your last settings and, in open mode, your canvas.
6. Your rights
You can access, export, correct or delete your data at any time. Deleting your projects is available in the studio; to delete your account, email us and we remove it together with all saved projects. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY).
7. Processors
Supabase (authentication and database), Vercel (hosting), fal.ai and Pollinations (AI generation, on your instruction). Data may be processed outside the EU by these providers under their standard contractual safeguards.
8. Changes
We update this page when the Service changes. The date at the top tells you when.
This document is a plain-language starting point for a small tool. Have it reviewed before relying on it commercially.