Privacy Policy

Last updated: December 24, 2025

6bit Innovation Labs LLC ("Company", "SnapGrapher", "we", "our", or "us") respects your privacy and is committed to protecting it through our compliance with this policy. SnapGrapher is a web-based AI photography companion that analyzes your uploaded photos and provides AI-generated reviews, tracks photography skills, and offers personalized weekly challenges. The Service is intended for use only within the United States; we do not intentionally market or offer the Service to users outside the United States. This policy describes how we collect, process, retain, and disclose personal data about you when providing services to you through our website and services that link to this policy (our "Services") and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• Through the Services, including when you create an account, upload photos, or use our AI analysis features.
• In communications between you and us, including email and other electronic messages.
• Through Firebase Authentication. (email/password or Google OAuth)
• User-provided content, including uploaded photographs, optional photographer's vision text, and optional feedback on reviews.
• Google OAuth (email address, display name, and profile picture URL).
• Automatically from your browser (IP address and timezone).
• Through third-party service providers that facilitate the Services (as detailed in the "Data Sharing and Third Parties" section below).

It does not apply to information collected by:

• Us through any other means, including on any other website operated by Company or any third party that does not link to this policy; or
• Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Services.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. This policy may change from time to time (see "Changes to Our Privacy Policy" below). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children's and Minors' Data

Our Services are not intended for, and we do not knowingly collect any personal data from, anyone under the age of 18. The Service is restricted to users who are at least 18 years old. If we learn we have collected or received personal data from anyone under 18 years old without verification of parental consent, we will delete that information.

The Personal Data That We Collect or Process

"Personal data" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, account information, IP address, or uploaded content.

The types and categories of personal data we collect or process include:

• Account and contact information, including your Firebase user ID, email address, first and last name, profile picture URL (if using Google OAuth), subscription tier, credit balance, timezone, and account creation/update timestamps.
• Account and transaction history, including your subscription tier (Free or Pro), credit balance, credit usage, monthly credit allocation dates, and transaction records (subscription events, credit charges, credit refunds).
• Internet and device information, including your IP address, browser timezone, and browser user agent (collected only in connection with content moderation events for abuse detection).
• Photography skills data derived from AI analysis of your uploaded photos, including detected skills and skill progression tracking used to personalize your experience.
• Visual content you upload, including photographs, images, and auto-generated thumbnails stored securely in encrypted cloud storage. We do NOT extract or store EXIF metadata (such as GPS coordinates or camera settings) from your images.

We also collect the following categories of information:

• AI-generated analysis and outputs. When you upload photos, we generate and store AI-powered reviews, feedback, insights, and photography skill assessments. This Output is specific to your uploaded images and is stored in your account.
• User-generated text inputs, including optional "photographer's vision" text you provide when uploading photos and optional feedback you provide on reviews. We do NOT track page visits, clickstream data, browsing history, session duration, or features used. We do NOT use analytics tracking tools like Google Analytics.

Content moderation records

When uploaded content is rejected by our automated moderation systems, we log the rejection event, including IP address, browser user agent, timestamp, and whether you acknowledged the rejection notice. These records are used solely for safety compliance and identifying patterns of policy violations.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information about you when you interact with our Services, such as when you create an account (via email/password or Google OAuth), upload photographs for AI analysis, provide optional context about your creative vision, submit photos for weekly challenges, provide feedback on reviews, or join the waitlist for paid subscription tiers.

Automatically Through Our Services

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies including details of your interactions with our Services, such as logs, and other communication data, and which resources and Services features that you access and use.

Using automatic collection technologies helps us to improve our Services and to deliver a better and more personalized experience.

The technologies we use for this automatic data collection may include:

• Essential Cookies Only. We use only essential cookies necessary for the Service to function, specifically for authentication (Firebase token with 1-hour duration) and security (CSRF token for session security). We do NOT use advertising cookies, analytics cookies, social media cookies, or third-party tracking cookies.
• Bot Prevention. We use automated bot prevention technology during account signup to prevent automated bot accounts and abuse.

We do NOT sell your personal information, use your data for targeted advertising, or engage in profiling for marketing purposes. The essential cookies and bot prevention tools we use are necessary for the Service to function and for security purposes.

When you interact with the Services, we share your data with third-party service providers necessary to operate the Services, including providers for: user authentication; database hosting; AI-powered photo analysis; encrypted cloud file storage; automated content moderation; bot prevention; and payment processing. These providers receive only the data necessary to perform their specific functions.

Third-Party Data Usage

Our AI analysis provider does NOT use your data to train their models. Per our provider's API data usage policy, data sent for analysis is retained for a limited period (currently 30 days) for abuse monitoring purposes only, then deleted. We store provider request IDs for compliance and incident mapping purposes.

Our service providers process data solely to provide the Services to you and are contractually prohibited from using your personal data for their own purposes. We do not permit third parties to use tracking technologies on our Services for advertising or analytics purposes. If you have questions about how our service providers handle your data, you should review their respective privacy policies or contact us for more information.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal data, to:

• Provide you with the Services, including generating AI-powered photo analysis and reviews, detecting and tracking photography skills, creating personalized weekly challenges, storing your uploaded photos securely, and managing your account and credit balance.
• Fulfill any other purpose for which you provide it.
• Provide you with notices about your account, including credit balance updates, monthly credit allocations, subscription tier information, and service updates.
• Improve our Services, including by analyzing user feedback, aggregated usage patterns, and system performance metrics to develop, maintain, analyze, improve, and optimize the Services. Important: We do NOT use your uploaded images, thumbnails, or any visual content to train or fine-tune AI model weights.
• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• Notify you about changes to the Services, new features, or updates to our policies.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to:

• Estimate our audience sizes and usage patterns.
• Store information about your preferences, allowing us to customize the Services according to your individual needs and interests.
• Speed up your searches.
• Recognize you when you return to our Services.

Who We Disclose Your Information To

We do not sell personal information. We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may also disclose personal data that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business and the Services, including providers for database hosting, authentication services, AI analysis, cloud storage, content moderation, bot prevention, and payment processing.

These providers receive only the personal data necessary to perform their functions and are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.

• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of 6bit Innovation Labs LLC 's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by 6bit Innovation Labs LLC is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Service and other agreements, including for credit usage enforcement purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our customers, or others.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.

Advertising, marketing, cookies, and other tracking technologies choices

• Essential Cookies. You can set your browser to refuse cookies, but if you disable the essential authentication cookies we use, you will not be able to access the Services.

SnapGrapher uses only essential cookies for authentication and security - we do not use advertising, analytics, or tracking cookies. Some browsers include a "Do Not Track" (DNT) setting; however, since we do not track users for advertising or analytics purposes, this setting does not affect our Services.

• Promotional Communications. If you do not wish to receive promotional emails or service updates from us, you can opt out by emailing support@snapgrapher.com with your request. Note that even if you opt out of promotional communications, we may still send you essential account-related communications (such as credit balance notifications or critical service updates).

Your State Privacy Rights

Depending on your state of residency, you may have certain rights related to your personal data.

California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the rights described below. California's "Shine the Light" law (Civil Code Section 1798.83) permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.

Depending on your state of residency, you may have certain rights related to your personal data, including:

• Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.
• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose.
• Deletion. You may request that we delete personal data about you that we maintain. To request deletion, email support@snapgrapher.com from the email address associated with your account. Upon receiving a valid deletion request, we will delete your user account, all associated records (including transaction history, review results, and skills data), and all files stored in AWS S3. The deletion process will be completed within 30 days in accordance with CCPA requirements. Subject to certain exceptions under applicable law.
• Opt Out of Sale, Sharing for Targeted Advertising, and Profiling. We do not sell your personal information, share it for cross-context behavioral advertising, or use it for profiling in furtherance of decisions that produce legal or similarly significant effects. If our practices change, you will have the right to opt out of these activities.

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.

To exercise any of these rights, please email support@snapgrapher.com with your request. For account and data deletion specifically, email support@snapgrapher.com from the email address linked to your account. To appeal a decision regarding a consumer rights request, email support@snapgrapher.com with "Appeal" in the subject line.

We recognize and process Global Privacy Control ("GPC") signals. Some browsers and browser extensions support the Global Privacy Control that can send a signal to websites you visit to indicate your preference to opt out from certain types of data processing, including data "sales" and "sharing" as defined under California and other state privacy laws. When we detect a GPC signal from your browser, we will treat it as a valid request to opt out of the sale or sharing of your personal information and profiling for decisions that produce legal or similarly significant effects, to the extent required by applicable law.

How We Protect Your Personal Data

We use reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. Specifically, uploaded photos and thumbnails are stored in encrypted cloud storage with AES-256 server-side encryption. Images are NOT publicly accessible and are delivered only to your own account web pages via time-limited presigned URLs with60-second expiration. Payment card details are never stored by us - all payment processing is handled directly by our payment processor. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee absolute security of your personal data transmitted to, through, using, or in connection with the Services.

In the event of a data breach that compromises your personal information, we will notify you and any applicable regulators as required by law.

How We Retain Your Personal Data

We retain the personal data described in this policy for as long as your account is active or as reasonably necessary to provide you with the Services. This includes user account data, uploaded photos and thumbnails, AI-generated review results, transaction records, photography skills data, challenge records, content moderation events, and waitlist entries. You may request deletion of your account and all associated data at any time by emailing support@snapgrapher.com from your account email address. We will process your deletion request within 30 days. We may also retain certain data as required by law or for legitimate business purposes such as fraud prevention, resolving disputes, troubleshooting problems, enforcing our Terms of Service, and complying with legal obligations.

Changes to Our Privacy Policy

We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the "last updated" date and posting the updated policy on the Services. We may email or otherwise communicate reminders about this policy, but you should check our Services periodically to see the current policy and any changes we have made to it.

Contact Information

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us at: support@snapgrapher.com.