Last reviewed May 10, 2026 · Effective immediately

lock Privacy

Privacy Policy

Effective May 10, 2026 · ~6 min read

auto_awesome

Plain-English Summary

inventory_2

What we collect

Name, email, usage data, and payment info via Stripe & Razorpay.

block

We never sell data

Your data is never sold, rented, or traded. Period.

schedule

Retention

Account data: +90 days after closure. Analytics: 36 months.

key

Your rights

Access, correct, export, or delete your data any time.

public

Introduction & Scope

Snpurl ("we", "our") is committed to protecting your privacy. This policy applies to all products and services we operate, including our web app, API, and browser extensions.

This policy is written in plain language. Where technical or legal terms are used, we explain them inline.

Applies to: All users worldwide. EU/EEA/UK users have additional GDPR rights see Section 8.

assignment

Information We Collect

We collect two types of information: data you provide directly, and data generated automatically when you use our service.

Account: first name, last name, email, hashed password (bcrypt)
Link data: destination URLs, custom aliases, expiry settings, password hashes
Usage: page views, feature interactions, session duration, error logs
Click data: timestamp, anonymised IP (raw IP deleted after 24 h), user-agent, referrer, geo-region
Communications: emails and support tickets you send to us

We do NOT collect: full card numbers, SSNs, government IDs, or GDPR Article 9 sensitive categories.

settings

How We Use Your Information

We process data only when we have a lawful basis:

Service delivery: redirects, analytics dashboards, QR code generation
Account management: password resets, plan confirmations, security alerts
Billing: processing payments, invoices, refund requests
Product improvement: anonymised, aggregated feature usage analysis
Legal compliance: GST records, responding to valid legal requests
Marketing (consent only): product updates unsubscribe any time in one click

schedule

Data Retention & Deletion

We keep data only as long as necessary:

Account data: life of account + 90 days post-closure
Analytics click data: 36 months
Billing records: 7 years (Indian tax law requirement)
Support conversations: 2 years
Raw IP addresses: anonymised after 24 hours

Delete your account instantly: Settings → Account → Delete Account, or email support@snpurl.com.

lock

Security Measures

We apply industry-standard security controls:

TLS 1.3 encryption in transit
AES-256 encryption at rest
Bcrypt password hashing (cost factor 12)
2FA available on all accounts
Regular third-party penetration testing
Bug bounty: support@snpurl.com

Cookies & Tracking

We use minimal, privacy-respecting cookies. Full details in our Cookie Policy.

Essential: session management, CSRF protection required for service function
Analytics: first-party only, no cross-site tracking
Preferences: theme, layout settings

No ad cookies: We do not use advertising cookies or share data with ad networks.

balance

Your Rights (GDPR, CCPA & PDPB)

Depending on your location you have these rights:

Access: request a copy of all data we hold
Rectification: correct inaccurate data
Erasure: delete your account and all data
Portability: export in JSON or CSV
Object: opt out of marketing processing
Restrict: limit processing during a dispute
CCPA (California): right to know, delete, opt out of sale (we do not sell)
PDPB (India): rights under the Personal Data Protection Bill once enacted

Email support@snpurl.com to exercise any right. GDPR: 30-day response. CCPA: 45-day response.

edit_note

Changes to This Policy

We notify you of material changes via email and in-app banner at least 30 days before they take effect.

Minor changes (typo fixes, clarifications) are noted in our Changelog without prior notice.

mail

Contact Details

Email: support@snpurl.com

For GDPR requests, include "GDPR Request" in your subject line. We respond within 30 days.