Privacy Policy
Last updated 30 October 2026
Who we are and how to contact us
This policy explains how Snaproom ("we", "us") collects, uses and shares personal data when you use snaproom.app (the "Service"). Snaproom is the data user under Malaysia's Personal Data Protection Act 2010 (PDPA).
Contact us at hello@snaproom.app for any question about this policy or your data. By using the Service you accept this policy. If you do not accept it, please do not use the Service.
What personal data we collect
We collect the data below when you use the Service.
- Account data. Your email address, name and profile image, received through our sign-in provider.
- Device data. For signed-in users, the device type, browser and operating system.
- Content you provide. Images and reference photos you upload, your prompts and settings, and the images and videos we generate for you.
- Billing and plan data. Your plan, credit balance, purchase history and a customer ID from our payment processor. You enter card details on the payment processor's hosted checkout page, and we do not store them.
- Usage records. Records of generations and credit use, and request logs that include prompt text, timestamps, status and cost.
- Support messages. What you send us by email or through any other support channel we offer.
- Visitor data. Pages viewed, events and device information, collected by analytics and advertising tools (see Cookies, local storage and tracking).
- Temporary uploads. Images uploaded before you sign in are held in server memory for about one hour.
You must give us account and billing data to use paid features. Without it we cannot provide the Service. We do not sell personal data.
How we use your data
We use your data to run the Service and, in limited ways, to improve and promote it.
- Create your account, sign you in and keep your session secure.
- Generate and edit the images and videos you ask for, and store the results in your account.
- Manage plans, credits, payments and invoices.
- Answer support requests and send service messages.
- Prevent abuse and fraud and keep the Service secure.
- Understand how the Service is used and fix problems.
- Measure how our marketing performs, including sign-ups from advertising.
- Meet legal obligations.
We do not use your uploaded images or generated outputs to train AI models. We do not sell your personal data.
Who we share data with
We share data with the types of service provider below, only as needed to run the Service.
- Sign-in and account services. Email, name, profile image and session data.
- Payment processors. Email, customer ID, plan and purchase details. Card details go to the processor directly.
- AI model and image providers. Your prompts and the images you upload or select, so they can generate and edit images and video.
- Hosting, storage and database providers. Everything you upload and generate, your account, billing and usage records, and server logs.
- Analytics and advertising providers. See Cookies, local storage and tracking.
- Support channels. What you send us when you contact us through them.
These providers handle data under their own terms and privacy policies, and the providers we use may change over time. We may also disclose data when the law requires it, to protect our rights or users, or in a sale or restructuring of the business.
Cookies, local storage and tracking
We use essential cookies to keep you signed in, and analytics and advertising tools that may set their own cookies.
- Essential cookies. Keep you signed in and your session secure. They last for the session or up to 7 days.
- Preference cookies. Remember choices such as whether the sidebar is open. They last up to 7 days.
Your browser also stores tool settings and work in progress in local storage and session storage. It stores images you add in the browser database (IndexedDB). This data stays on your device until you clear it.
We use third-party analytics and advertising tools. These tools may set cookies or similar identifiers. They receive page views, device information and events such as sign-up. They may run for all visitors.
You can block these tools in your browser settings or with a tracking-protection extension. You can also manage ad preferences in the settings of the advertising platforms you use.
How long we keep data
We keep your account data and your uploaded and generated content for as long as your account is active, unless you ask us to delete them. To ask us to delete data, see Your rights and how to request deletion.
- Temporary uploads before sign-in. Removed from server memory after about one hour.
- Billing and transaction records. Kept for as long as tax and accounting rules require.
- Logs. Kept for as long as we reasonably need them for security, troubleshooting and improving the Service.
- Service providers. They keep data under their own policies, which can differ from ours.
Your rights and how to request deletion
You can ask us to give you a copy of your personal data, correct it, delete it, limit how we use it, or withdraw a consent you gave. To make a request, email hello@snaproom.app from the address on your account and describe in detail what you want, including which data or content it relates to. We may ask you to confirm your identity first. We will review your request and reply as soon as reasonably practicable.
Where we agree to a deletion request, we delete the data we hold and have access to. We cannot delete data held by third-party service providers, and their own policies apply to it. We may keep records that the law requires us to hold.
Depending on where you live, you may have other rights under local law, such as the PDPA in Malaysia or the GDPR in the EU and UK.
International transfers, security and breaches
Our service providers process data in countries outside Malaysia, including the United States. By using the Service you understand that your data may be processed there.
We use reasonable technical and organisational measures to protect your data. No system is completely secure, so we cannot guarantee absolute security.
If a personal data breach occurs that the law requires us to report, we will notify the Personal Data Protection Commissioner and affected users as the law requires.
Children and changes to this policy
The Service is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has given us data, email hello@snaproom.app and we will look into it.
We may update this policy at any time, whenever we consider it necessary. The current version is always posted on this page with its date. We do not promise to notify you of changes, so please check this page from time to time. By continuing to use the Service after a change, you accept the updated policy.