Privacy Policy

Last updated: March 2026  ·  Effective date: March 2026  ·  GDPR compliant

This Privacy Policy explains how JustSnapIt ("we", "us", "Service") collects, uses, and protects your personal data. We operate under the laws of the Republic of Lithuania and comply with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller for your personal data is JustSnapIt, operating in Vilnius, Lithuania. Contact: [email protected]

2. What Data We Collect

Data	Why we collect it	Legal basis
Email address	Account creation and login	Contract
Full name (optional)	Personalization	Consent
Hashed password	Authentication (bcrypt)	Contract
Business name, niche, city	AI post generation context	Contract
Uploaded product photos	AI image analysis and post generation	Contract
Generated posts and hashtags	Post history and republishing	Contract
Social network tokens (encrypted)	Publishing posts on your behalf	Consent
Usage statistics (posts used)	Plan limits enforcement	Contract
Subscription data (plan, billing ID)	Payment and access management	Contract

3. How We Use Your Data

• To provide and improve the Service
• To generate AI-powered social media captions and hashtags
• To publish posts to social networks on your behalf (when you authorize it)
• To manage your subscription and send billing-related communications
• To respond to your support requests

We do not sell your data, use it for advertising, or share it with third parties except as described in Section 4.

4. Third-Party Services

Service	Purpose	Data shared
Anthropic (Claude API)	AI text and image analysis	Product photos, business context
Telegram Bot API	Publishing posts to Telegram	Post text, images
Meta (Facebook/Instagram API)	Publishing to Facebook/Instagram	Post text, images (when authorized)
LemonSqueezy	Payment processing	Email, billing info
Hetzner	Cloud hosting (server in Helsinki)	All data stored on server

All third-party services have their own privacy policies. We only share data necessary to provide the Service.

5. Data Storage and Security

• All data is stored on a server in Helsinki, Finland (EU), operated by Hetzner GmbH.
• Passwords are hashed with bcrypt — we cannot see your password.
• Social network tokens are encrypted with AES (Fernet) before storage.
• All connections are encrypted with TLS (HTTPS).
• Regular database backups are performed.

6. Data Retention

• Account data: retained while your account is active, deleted within 30 days of account deletion.
• Uploaded photos: stored on server, deleted when you delete the post or your account.
• Generated posts: retained in history until you delete them or close your account.

7. Your Rights (GDPR)

As an EU resident, you have the following rights:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data ("right to be forgotten").
• Portability: receive your data in a machine-readable format.
• Restriction: request that we limit processing of your data.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: revoke consent at any time (e.g., disconnect Facebook from Settings).

To exercise these rights, email us at [email protected]. We will respond within 30 days.

8. Cookies

JustSnapIt uses only a JWT authentication token stored in your browser's localStorage. We do not use tracking cookies or third-party analytics cookies.

9. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notification when material changes occur.

11. Complaints

If you believe we have violated GDPR, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania: vdai.lrv.lt

12. Contact

For any privacy-related questions: [email protected]