Privacy Policy

SnowArt — Privacy Policy

Last Updated: July 31, 2026 · https://snowart.ai

SnowArt ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use SnowArt (the "Service"), and the rights available to you.

Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update this Policy periodically and will notify you of material changes via email or an in-product notice.

1. Data Controller

The data controller for this Service is the individual operator of SnowArt, reachable at:

  • Privacy inquiries: support@snowart.ai
  • Data Protection Officer (DPO): not applicable (sole-operator service)

2. Personal Information We Collect

2.1 Information You Provide Directly

  • Account information: name, email address, and password (stored hashed), or your basic profile shared by Google / GitHub when you sign in through them.
  • Payment information: transaction amount and payment status only. Full card numbers are never stored by us — card data is processed by our payment processor (see Section 5).
  • Content you submit: text prompts you enter and reference images you upload for generation or editing.
  • Communications: emails, support requests, and feedback you send us.

2.2 Information We Collect Automatically

  • Device & network: IP address, device type, operating system, browser type, time zone.
  • Usage data: pages visited, feature usage, generation activity, session duration.
  • Log data: request timestamps, error logs, performance metrics.

3. How We Use Your Information

| Purpose | Legal Basis | | ----------------------------------------------------------------------- | --------------------------------------- | | Service delivery (running generations, storing your results) | Contract performance | | Billing & payment processing | Contract performance | | Customer support | Contract / Legitimate interests | | Service notifications (billing, security, policy) | Legitimate interests | | Security, anti-abuse & content safety (prompt screening, rate limiting) | Legitimate interests / Legal obligation | | Product analytics & improvement | Legitimate interests | | Legal compliance | Legal obligation |

We do not use your prompts, uploaded images, or generated outputs to train AI models. Prompts are screened by automated content-safety systems before generation (see our Acceptable Use Policy). We may aggregate or anonymize data for statistical purposes; such data cannot be linked to any individual.

4. Cookies & Tracking Technologies

| Type | Purpose | Disableable | | ------------------ | ------------------------------------------------------------------- | ---------------------- | | Strictly necessary | Login sessions, core functionality, locale preference | No | | Analytics | Anonymous usage statistics, product optimization (Google Analytics) | Yes (browser settings) |

We do not run marketing or advertising cookies.

5. Sharing & Disclosure

We do not sell your personal information, including as defined under applicable laws such as the CCPA. We share information only with the service providers required to run the Service, bound by confidentiality:

  • Waffo Pancake — merchant of record and PCI-DSS certified payment processor; card data is processed exclusively by them and never stored on our servers.
  • fal.ai — AI inference platform; receives your prompts and reference images solely to run the generation you requested.
  • Vercel — application hosting.
  • Neon — database hosting.
  • Cloudflare — DNS, networking, and object storage for uploaded and generated media.
  • Resend — transactional email delivery.
  • Google / GitHub — sign-in providers, when you choose to log in with them.
  • Sentry — error monitoring.
  • Google Analytics — anonymous usage analytics.

We may also disclose information where required by law, court order, or a lawful regulatory request; in a merger, acquisition, or similar event (with advance notice and continued protections); or for any other purpose with your explicit prior consent.

6. Data Security

  • Encryption in transit: TLS / HTTPS on all connections.
  • Secure storage: passwords are hashed; secrets and sensitive data are encrypted.
  • Access controls: least-privilege access to production systems.
  • Continuous error and anomaly monitoring.

In the event of a security incident affecting your rights, we will notify you and the relevant authorities within 72 hours of discovery as required by law. Please keep your credentials secure and do not share them.

7. Data Retention

| Data Type | Retention Period | Upon Expiry | | --------------------------- | -------------------------------------------- | ------------------- | | Account information | While active; 90 days after account deletion | Deleted | | Generated content & uploads | While active; removed with account deletion | Deleted | | Transaction records | As required by tax law (typically 7 years) | Deleted or archived | | Support records | 2 years | Secure deletion | | Security & moderation logs | 12 months | Secure deletion |

8. Your Data Rights

To exercise any right below, contact support@snowart.ai; we respond within 30 calendar days.

| Right | Description | | ---------------------------- | -------------------------------------------------- | | Right to be informed | Know what data we collect and how we use it | | Right of access | Obtain a copy of your personal information | | Right to rectification | Correct inaccurate or incomplete data | | Right to erasure | Request deletion under certain conditions | | Right to restrict processing | Temporarily suspend processing in certain cases | | Right to data portability | Receive your data in a machine-readable format | | Right to object | Object to processing based on legitimate interests | | Right to withdraw consent | Withdraw consent for consent-based processing |

You may also lodge a complaint with your local data protection authority.

9. Marketing & Opt-Out

We currently send only essential service notifications (billing, security, policy changes). If we introduce marketing communications in the future, they will be consent-based with a one-click unsubscribe.

10. International Data Transfers

Our servers and service providers are primarily located in the United States. For international transfers, we rely on data processing agreements with our providers incorporating appropriate safeguards, including EU Standard Contractual Clauses (SCCs) where applicable.

11. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect information from children. If you believe a child has provided information, contact us immediately and we will promptly delete it.

12. Third-Party Links & Services

The Service may include links to third-party services. This Policy applies only to data we directly collect. We are not responsible for third-party privacy practices and encourage you to review their policies before use.

13. Policy Changes

For material changes, we will provide at least 15 days' advance notice via email or platform announcement, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

  • All privacy inquiries: support@snowart.ai

SnowArt · https://snowart.ai