Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to information we collect when you:

• visit our website,
• create or use an account,
• upload or store files,
• purchase subscriptions,
• contact support,
• receive communications from us, or
• otherwise interact with the Services.

2. Information We Collect

A. Information You Provide Directly

Depending on how you use the Services, we may collect:

• name
• email address
• profile image
• username
• password or authentication credentials
• billing address
• subscription plan details
• billing status
• support messages or correspondence
• files, photos, folders, captions, comments, and content you upload
• information you choose to provide to us

B. Information From Login Providers

If you sign in using third-party login providers such as Google or Apple, we may receive information such as:

• name
• email address
• profile photo
• account identifier tokens

The information we receive depends on your settings with those providers.

C. Payment Information

Payments are processed by Stripe or other payment processors we may designate.

Snowdrift does not store full payment card numbers. We may receive limited billing-related information such as:

• subscription status
• payment success or failure indicators
• plan type
• invoices or transaction identifiers
• billing contact details

Use of payment information by our processors is governed by their own privacy policies.

D. Files and File Metadata

When you upload files or photos, we collect the content itself and related metadata, which may include:

• file name
• file size
• dimensions
• MIME type
• creation or capture date/time
• camera make and model
• lens model
• exposure settings
• ISO
• focal length
• orientation
• embedded artist or copyright fields
• GPS/location metadata if present
• other metadata embedded in files

E. Automatically Collected Information

When you use the Services, we may automatically collect technical information such as:

• IP address
• browser type
• device type
• operating system
• referring URLs
• pages viewed
• feature usage
• timestamps
• crash logs
• diagnostic information

F. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for purposes such as:

• authentication and session management
• remembering preferences
• security
• fraud prevention
• measuring usage
• improving the Services

We may add analytics tools in the future that use cookies or similar technologies.

3. How We Use Information

We may use personal information to:

• provide, operate, and maintain the Services
• create and manage accounts
• authenticate users
• store, back up, organize, and deliver files
• process subscriptions and billing
• communicate with you
• respond to support requests
• detect abuse, fraud, and security incidents
• troubleshoot and debug issues
• personalize the user experience
• improve products and features
• comply with legal obligations
• enforce our Terms of Service

4. AI and Automated Processing

Snowdrift uses automated systems, machine learning, and AI-powered tools to provide product functionality. This may include:

• text-based image search
• similarity search
• duplicate detection
• image quality scoring
• filtering and organization
• metadata extraction
• categorization
• OCR or text recognition
• summaries or recommendations
• future product features reasonably related to the Services

Snowdrift does not use your uploaded files or personal content to train general-purpose AI models for use by other customers or the public.

At present, these features are operated using systems hosted on Snowdrift-controlled infrastructure.

5. How We Share Information

We do not sell your personal information.

We may share information only as described below:

A. Service Providers

We may share information with vendors who help us operate the Services, such as:

• hosting providers
• storage providers
• payment processors
• authentication providers
• email delivery providers
• customer support tools
• analytics providers
• security vendors

They are permitted to use information only to provide services to us or on our behalf.

B. Sharing You Initiate

If you create share links or otherwise share files, content may be accessible to anyone who receives the link. Current share links may allow access without login credentials.

C. Legal Reasons

We may disclose information if reasonably necessary to:

• comply with law, subpoena, or legal process
• respond to lawful government requests
• protect rights, safety, or property
• investigate fraud or abuse
• enforce our agreements

D. Business Transfers

If Snowdrift is involved in a merger, acquisition, financing, restructuring, or sale of assets, information may be transferred as part of that transaction.

6. Data Retention

We retain information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

Examples:

• active account data is retained while accounts remain active
• support communications may be retained for service and legal purposes
• billing and transaction records may be retained for accounting, tax, and compliance purposes
• backups may persist for limited periods

Account Deletion

If an account owner deletes the account, associated user data and files may be scheduled for deletion and generally permanently removed within approximately 7 days, subject to technical processes, backups, fraud prevention, legal obligations, or security needs.

Deleting an individual user from a multi-user account may not delete shared workspace files.

7. International Users

Snowdrift is based in the United States, and data is currently hosted primarily in the United States.

If you access the Services from outside the United States, you understand your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no system is completely secure. We cannot guarantee absolute security.

9. Your Choices and Rights

Depending on your location, you may have rights regarding your personal information, including rights to:

• access information we hold about you
• correct inaccurate information
• delete certain information
• object to or restrict certain processing
• request portability of certain data
• withdraw consent where processing is based on consent

To exercise rights, contact us using the information below. We may need to verify your identity.

10. Marketing Communications

We may send:

• service-related transactional emails
• billing notices
• security alerts
• product announcements
• newsletters or marketing communications

You may unsubscribe from marketing emails using the unsubscribe link or by contacting us. Transactional messages may still be sent when necessary.

11. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided us personal information, contact us and we will take appropriate steps.

12. California Privacy Notice

If you are a California resident, you may have rights under California law regarding access, deletion, correction, and certain disclosures about personal information collection and use.

Snowdrift does not sell or share personal information for cross-context behavioral advertising as those terms may be defined under California law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice by posting updates, email, or through the Services.

Your continued use of the Services after changes become effective constitutes acceptance of the updated policy.

14. Contact Us