SnapAudit is operated by Blizzard Trade LLC, a Florida limited liability company (Document #L17000133723, registered with the Florida Department of State on 21 June 2017), with its principal place of business at 221 West Hallandale Beach Blvd, Suite 310, Hallandale Beach, FL 33009, USA. For questions about this policy or to exercise any of the rights described below, contact us at [email protected].
We act as a data controller for account information, and as a data processor for content uploaded to the Service.
The Customer is the data controller for uploaded content. The Customer is responsible for ensuring any persons depicted have consented or that another lawful basis applies under their local data-protection law.
| Category | Retention |
|---|---|
| Account record | For the duration of the account + 30 days after deletion |
| Reference photographs | Until the checkpoint is deleted by the Customer |
| Inspection photographs | 90 days (after which only metadata is archived) |
| Inspection metadata (archive) | Indefinitely, for historical analytics |
| Session cookies | 30 days sliding window |
| Billing records | As required by applicable tax law (typically 7 years) |
Under GDPR (and equivalent legislation in the UK, California, and elsewhere) you have the right to:
To exercise any of these rights, email [email protected]. We respond within 30 days.
No system is perfectly secure. If you suspect a security issue, email [email protected] — we aim to triage within 24 hours.
Some processing is performed by sub-processors in categories including model inference, object storage, transactional email, CDN / DDoS protection, and payment processing. Some of these sub-processors operate outside the EEA / UK; where transfers leave the adequacy region, we rely on Standard Contractual Clauses (SCCs) and supplementary measures (encryption at rest, access controls) to provide appropriate safeguards under GDPR Articles 46–48.
The full sub-processor list with specific vendor names, processing regions, and contractual safeguards is shared with customers under our Data Processing Agreement — email [email protected] to request the DPA + accompanying sub-processor schedule. Customers with strict data-residency requirements can opt for an Enterprise deployment with a dedicated storage region by contract.
We will notify account holders of material changes at least 14 days before they take effect. The "Effective date" above always reflects the current version.
Privacy-specific enquiries: [email protected]. General enquiries: [email protected].