1. Overview
We do not sell your personal data, and we do not display third-party advertising inside Snagify. We collect what is needed to deliver the inspection service, to secure it, and to grow it, and this policy tells you exactly what that means.
Snagify is operated by INNOVADATA ANALYSIS SERVICES - FZCO (Trade License No. 72335, IFZA, Dubai Silicon Oasis, Dubai, UAE) ("the Company", "we", "us"), acting as the data controller for the processing described here. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable UAE law.
This policy covers account holders and people who interact with Snagify without an account, in particular tenants and landlords who sign inspection reports (see Section 3).
2. What we collect
Account information: name and email when you create an account; professional details you choose to add (company name, RERA number, job title); optional profile photo and saved signature image; the date you accepted our Terms.
Inspection data: property details you enter (building, unit, type); photos taken during inspections; condition assessments, damage tags, and evolution assessments; notes and descriptions (including AI-drafted text you validate); signatures collected during the signing process; timestamps and, where enabled, GPS metadata attached to photos.
Timestamps and location metadata exist to strengthen the evidential value of reports and appear in generated documents.
Usage data: device type, operating system, browser version; pages visited and in-app actions; error logs (kept with our hosting provider for debugging).
Analytics and advertising identifiers: see Section 6. We are transparent about this: measurement and advertising tools are used on our website and app.
Payment data: payments are processed by Stripe. We do not store card numbers on our servers; we retain billing records (plan, invoices, transaction status) linked to your account.
3. If you sign a report without an account
Inspection reports are signed by parties who may not hold a Snagify account (typically tenants and landlords). For these signatories we process: name, email address and/or phone number (for identity verification and delivery of the signed report), the signature image, signing timestamps, and verification codes.
This data is processed to execute the inspection and signature process initiated by the inspecting user, and to preserve the integrity and verifiability of the signed report for all signing parties. Signed reports and associated signatures are retained as described in Section 8.
The inspecting user (agency or individual) is responsible for ensuring they have the right to enter another person's details into the Service. If you signed a report and have questions about your data, contact us (Section 15), your rights under Section 10 apply to you as well.
4. How we use personal data
- To generate, store, deliver, and enable verification of inspection reports (performance of the service);
- to power AI-assisted analysis and drafting (Section 5);
- to send inspection-related notifications, signature requests, and reminders;
- to process payments and manage subscriptions and credits (via Stripe);
- to measure and improve the product, fix bugs, and secure the Service;
- to measure our own marketing and acquisition campaigns (Section 6);
- to comply with UAE law and respond to valid legal requests.
5. AI processing
Photos and related inspection context are sent to Anthropic (Claude models) to generate draft descriptions, suggested tags, suggested evolution assessments, and report summaries. This processing happens under Anthropic's commercial API data terms: inputs and outputs are not used to train Anthropic's models, and are handled per Anthropic's usage and retention policies (see anthropic.com/legal). AI outputs are drafts subject to human validation, as described in our Terms of Service.
6. Analytics & advertising measurement
We use the following tools on snagify.net and, where indicated, in the app:
- Google Analytics 4: audience measurement across our website and app (cross-domain), so we understand how Snagify is used.
- Meta Pixel and Conversions API: measurement and attribution of our own advertising campaigns (e.g. knowing that a signup followed one of our ads). Event data may include hashed identifiers (such as a hashed email) shared with Meta for deduplication and attribution.
- Microsoft Clarity: session analytics (interaction patterns such as clicks and scrolls) to improve usability.
- Google Ads: conversion measurement for our own campaigns.
These tools help us measure our product and our own marketing. We do not sell your data, and we do not permit these providers to use it for their own independent advertising purposes beyond what their terms provide. Each provider processes data under its own privacy policy. You can limit collection through browser settings, tracker-blocking tools, and the opt-outs each provider offers.
7. Storage, security & international transfers
Your data is stored on Supabase infrastructure hosted in the Asia-South (Mumbai, India) region, with photos and PDFs in access-controlled storage buckets. Because we operate from the UAE and use international providers, personal data is transferred to and processed in other jurisdictions (including India (hosting), the United States and/or the EU (Vercel, Anthropic, Stripe, Google, Meta, Microsoft, Resend)) under each provider's safeguards and data processing terms, as permitted by the PDPL.
We use encryption in transit (TLS) and at rest. Signed inspection reports carry a SHA-256 content hash making post-signature alteration detectable. Access to production data is restricted and logged.
No system is perfectly secure; we encourage you to use a strong, unique password and to keep copies of downloaded reports.
8. Retention
- Active accounts: inspection data is retained while your account is active.
- Signed reports: signed reports, their verification hashes, and associated signatures are retained for five (5) years from the date of signature, including after the creating account is closed, because they serve as records for all signing parties (see Terms of Service, Section 8).
- Account closure: other personal data (drafts, unsigned inspections, account data) is deleted within 30 days of closure, except where law requires longer retention.
- Deleted inspections: if you delete an unsigned inspection, its photos and files are permanently removed from storage.
- Abandoned drafts: draft inspections inactive for 30 days are automatically deleted, including their photos.
- Payment suspension: after a failed-payment suspension, account data is retained for 90 days.
10. Your rights
Subject to the PDPL, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your account and associated data (subject to the signed-report retention in Section 8); receive a copy of your inspection reports at any time; object to or restrict certain processing; and withdraw consent where processing is based on consent.
To exercise any right, email hello@snagify.net with the subject "Privacy Request". We respond within 14 business days. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office or other competent authority.
11. Cookies
Snagify uses:
- Essential cookies: authentication and session management (required; disabling them prevents login);
- Analytics and measurement cookies/identifiers: set by the tools listed in Section 6.
You can control non-essential cookies through your browser settings and the providers' opt-out mechanisms.
12. Data breach notification
If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the competent UAE authority and, where required, the affected individuals, in accordance with the PDPL.
13. Children
Snagify is not directed at individuals under 18, and we do not knowingly collect data from them. Account holders must be at least 18 (see Terms of Service).
14. Changes to this policy
We may update this policy as the Service evolves. Material changes will be notified (email or in-app) before taking effect. The "Last updated" date reflects the current version.
15. Contact
Privacy inquiries
INNOVADATA ANALYSIS SERVICES - FZCO: IFZA Properties, Dubai Silicon Oasis, Dubai, UAE.
Privacy inquiries and data requests: hello@snagify.net (subject: "Privacy Request").
We respond within 14 business days.