Privacy Policy

This Privacy Policy describes how snoozestack ("we", "us") collects and uses information when you use the console, CLI, client SDKs, and hosted project infrastructure (the "Service"). It doesn't cover data you store inside your own projects on behalf of your own end users — you are the controller of that data, and your own privacy policy governs it.

Account information: email address, password (hashed), and any profile details you provide when you sign up or log in.

Project data: the database rows, files, functions, and configuration you create in your projects, so we can run the Service on your behalf.

Usage and log data: API requests, CLI activity, and container logs, used for operating, securing, and debugging the Service.

Billing information: if your organization is on a paid plan, payment is handled by Stripe, our payment processor. Stripe receives your organization's name, the owner's email address, and the payment details you enter on Stripe's pages; we never see or store card numbers. What we keep is the link to Stripe — a customer and subscription identifier — together with the plan, its status, and the date the current billing period ends. Receipts and payment-failure notices are sent by Stripe.

Activity log: changes made to an organization and its projects through the console, the CLI, an AI agent holding an MCP token, or by billing events — what changed, when, and by which account or token — are recorded so owners can see the history. Entries are kept for 90 days.

To provide, operate, and secure the Service; to communicate with you about your account (including service and security notices sent via email); to provide support; and to improve the Service. We don't sell your data.

Our public website — the marketing pages, the documentation, and the early access request form — uses Google Analytics to understand how people find and move through it. It records the pages you visit, roughly where in the world you are, and what kind of device and browser you used, and it sets cookies in your browser to recognise a return visit. We also record when someone begins and completes the sign-up form, so we can tell how well it works.

The console itself carries no analytics script and sets no analytics cookies. So that we can see whether the website leads to accounts that get used, our servers do send a handful of milestone events to Google Analytics — someone signed up, an account was confirmed or set up, a project was created, a checkout was started, a plan changed — each carrying the event name, the plan where relevant, and a pseudonymous identifier: the analytics id of the website visit that signed up, when the sign-up form was able to read it, or otherwise an identifier derived from the account that Google cannot link to you. No name, email address, project name, or content is sent.

Nothing you or your end users store in a snoozestack project is sent to Google. Blocking cookies or using a tracker-blocking extension stops the website collection (and leaves the request form without an analytics id to hand on) and won't affect anything on the site.

We share information with subprocessors strictly to operate the Service: our cloud hosting provider (Amazon Web Services), our email delivery provider, and Stripe for payments, which processes your billing information under its own privacy policy. We share information with law enforcement when required by law. We don't share your account or project data with third parties for advertising purposes.

We retain account and project data for as long as your account is active. A paused project — stopped by its owner, or because the organization is over its plan's allowance — keeps all of its data while paused. If you delete a project or your account, the associated data is removed within a reasonable grace period, except where we're required to retain it by law. Billing records held by Stripe are kept for as long as Stripe and applicable tax and accounting law require.

We use industry-standard measures — encryption in transit, access controls, and isolated project infrastructure — to protect your data. No method of transmission or storage is perfectly secure, so we can't guarantee absolute security.

You can access, export, or delete your project data at any time through the console or CLI. You can delete your account by contacting us. You can change or cancel a paid plan, update your payment method, and download invoices from Billing in the organization's settings. You can turn each kind of organization notification email on or off there too; service and security notices are always sent.

We may update this Privacy Policy from time to time. We'll update the date above when we do, and for material changes we'll try to give reasonable notice.

Questions about this policy? Email support@snoozestack.com.