Privacy Policy

Last updated: January 2026

1. Introduction

Snipara ("we", "our", or "us") is committed to protecting your privacy in accordance with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our context optimization service.

2. Data Controller

The data controller responsible for your personal data is:

Snipara
Switzerland
Email: privacy@snipara.com

3. Information We Collect

Account Information

When you create an account, we collect:

  • Email address (required for account creation)
  • Name (if provided)
  • Profile picture (if using OAuth authentication)

Usage Data

We automatically collect:

  • Query logs (tool used, timestamps, token counts)
  • API usage statistics
  • Error logs for debugging purposes

Documentation Content

When you upload documentation to Snipara, we store and process this content solely to provide our context optimization service. This content remains your intellectual property.

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

  • Contract performance: Processing necessary to provide our services to you
  • Legitimate interests: Improving our services, security, and fraud prevention
  • Legal obligations: Compliance with applicable laws and regulations
  • Consent: Where you have given explicit consent for specific processing activities

5. How We Use Your Information

We use the collected information to:

  • Provide and maintain our service
  • Process your queries and return optimized context
  • Send you service-related notifications
  • Monitor usage for billing purposes
  • Improve our service and develop new features
  • Respond to your inquiries and support requests
  • Ensure the security and integrity of our platform

6. Data Storage and Security

Your data is stored securely in data centers located in the European Union. We implement appropriate technical and organizational measures including:

  • HTTPS/TLS encryption for all data transmission
  • Encrypted database storage at rest
  • Hashed API keys (we never store raw keys)
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms

7. Data Sharing and Third Parties

We do not sell your personal information. We may share data with the following categories of recipients, all of whom are bound by data processing agreements:

  • Stripe (USA) - Payment processing, with Standard Contractual Clauses
  • Resend (USA) - Email delivery, with Standard Contractual Clauses
  • Vercel (USA/EU) - Hosting infrastructure
  • GitHub/Google - OAuth authentication (only if you choose these methods)

We may also disclose data to legal authorities when required by Swiss or applicable law, or to protect our legal rights.

8. International Data Transfers

When we transfer personal data outside of Switzerland or the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable
  • Other legally recognized transfer mechanisms

9. Your Rights Under GDPR and Swiss FADP

You have the following rights regarding your personal data:

  • Right of access: Obtain confirmation and a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to restriction: Restrict processing in certain circumstances
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@snipara.com. We will respond within 30 days.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. Upon account deletion:

  • Personal data is removed within 30 days
  • Anonymized usage statistics may be retained for analytics
  • Data required for legal compliance may be retained as required by law

11. Cookies and Similar Technologies

We use only essential cookies for authentication and session management. We do not use tracking cookies for advertising or cross-site tracking purposes.

  • Session cookies: Required for authentication and security
  • Preference cookies: Remember your settings and preferences

12. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our service at least 30 days before the changes take effect.

14. Supervisory Authority

If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC):

FDPIC
Feldeggweg 1
CH-3003 Berne
Switzerland
www.edoeb.admin.ch

For EU residents, you may also contact your local data protection authority.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: privacy@snipara.com