Snapit

Legal

Privacy Policy

Last updated: June 30, 2026

1. Introduction

Snapit ("we", "our", or "us") operates a cross-device clipboard synchronisation service. This Privacy Policy explains what information we collect when you use Snapit, how we use it, and what rights you have over it.

By creating an account or using our service you agree to the practices described in this policy.

2. Information We Collect

2.1 Account information

When you register we collect your email address and a cryptographic hash of your password. We never store your password in plain text.

2.2 Clipboard content

Your clipboard items are encrypted on your device before being sent to our servers. We use AES-256-GCM encryption with a key derived from your password using PBKDF2. This means we cannot read your clipboard content — it is mathematically indistinguishable from random noise on our servers.

2.3 Device information

We record a device name, platform (macOS, Windows, iOS, Android), and the approximate time each device last synced. This lets you manage your connected devices from your account dashboard.

2.4 Billing information

Payment is processed by Paystack. We receive confirmation of successful payments and a Paystack customer identifier, but never see your full card number or bank details.

2.5 Usage and technical data

Our servers log standard HTTP request metadata (timestamp, HTTP method, path, status code, response time). These logs are used to debug errors, monitor service health, and detect abuse. They are not linked to individual clipboard items.

3. How We Use Your Information

  • Service delivery — syncing your encrypted clipboard across the devices you authorise.
  • Account management — sending email verification, password-reset, and billing receipts.
  • Security — detecting and responding to unauthorised access, rate-limiting abuse, and maintaining audit logs.
  • Service improvement — aggregate, anonymised usage metrics to understand feature adoption.

We do not sell your data, serve ads, or share your information with third parties for marketing.

4. Data Storage and Security

Your encrypted clipboard data is stored in a database hosted in a secured cloud environment. All data is encrypted at rest and in transit (TLS 1.2+). Access to production systems is restricted to authorised personnel and protected by multi-factor authentication.

Because clipboard items are end-to-end encrypted, a breach of our database would not expose the content of your clipboard — only encrypted ciphertext that is useless without your password.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated clipboard items, device records, and personal data are permanently deleted within 30 days. Billing records are retained for 7 years as required by financial regulations.

6. Your Rights

Depending on your location, you may have rights to:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and all associated data.
  • Export your data in a machine-readable format.
  • Object to or restrict certain types of processing.

To exercise any of these rights, email us at privacy@snapit.ink. We will respond within 30 days.

7. Cookies and Local Storage

The Snapit web application uses a single encrypted session cookie to maintain your login. We do not use tracking cookies, analytics pixels, or third-party advertising scripts.

8. Third-Party Services

9. Children

Snapit is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us at privacy@snapit.ink.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of any material changes at least 14 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.

11. Contact

Questions about this policy or how we handle your data? Email privacy@snapit.ink.