Privacy Policy

1. About SnapperHQ

SnapperHQ ("SnapperHQ," "we," "our," or "us") is a multi-tenant SaaS platform operated by SnapperHQ LLC, a Washington limited liability company located at 1909 Allen Ave, Moses Lake, WA 98837. SnapperHQ serves real estate photography businesses and the real estate agents who book photo shoots with them, providing booking, scheduling, photo gallery delivery, payment processing, and related business-management tools.

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our services. Please read it carefully.

2. Information We Collect

2.1 Information you provide to us

• Account and profile information (name, email address, password, business credentials)
• Business information (company name, address, phone number, tax ID, professional licenses)
• Mobile phone numbers and SMS opt-in records, including the timestamp, IP address (where available), source URL, the verbatim consent language presented at opt-in, message reply content (e.g., "YES" or "STOP"), opt-out timestamps, and message delivery metadata
• Client project data, media files, photo galleries, and deliverables
• Payment and billing information (processed securely through Stripe and Stripe Connect)
• Marketing campaign data and connected advertising-account permissions
• Communications with our support team and platform usage data

2.2 Information we collect automatically

• Device and browser information, IP address, and approximate location derived from IP
• Pages visited, features used, session timestamps, and interaction events
• Cookies, local storage, and similar technologies (see Section 3)

2.3 Information we receive from third parties

• Connected service accounts you authorize (e.g., Google Drive/Calendar, Facebook, Google Ads)
• Payment-status, payout, and tax information from Stripe and Stripe Connect
• SMS delivery and reply data from our messaging provider, sent.dm

3. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies for the following purposes:

• Strictly necessary: authentication, session management, and security
• Functional: remembering preferences such as dark mode
• Analytics: aggregate usage data to improve the service

We do not use cookies for cross-context behavioral advertising. SnapperHQ honors the Global Privacy Control (GPC) browser signal as a valid opt-out request under California, Colorado, Connecticut, Texas, and Oregon privacy laws.

4. SMS / Text Messaging Communications

SnapperHQ uses SMS to send transactional messages on behalf of photography businesses to their staff and to the real estate agents who book photo shoots with them. SMS messages are delivered through our messaging provider sent.dm over a 10-digit long code (10DLC) registered to SnapperHQ LLC through The Campaign Registry, using licensed United States telecommunications carriers.

4.1 How users opt in

Photography business staff and account holders opt in by checking a consent box during account setup at snapperhq.com/signup. The consent box is unchecked by default and the verbatim language reads:

"I agree to receive SMS messages from SnapperHQ including account updates, delivery notifications, security codes, and customer support messages. Message frequency may vary. Msg & data rates may apply. Reply HELP for help, Reply STOP to cancel."

Real estate agents are added by photography businesses when scheduling a photo shoot. Upon being added, the agent receives a one-time double opt-in confirmation message:

"[Photography Business Name] uses SnapperHQ to send shoot reminders by text. Reply YES to confirm or STOP to cancel. Reply HELP for help. Msg&data rates apply."

No further messages are sent to the agent until they reply YES, at which point a confirmation is delivered:

"SnapperHQ: You have subscribed to shoot reminders from [Photography Business Name]. Message frequency may vary. Msg&data rates apply. Reply HELP for help, Reply STOP to cancel."

4.2 Message types and frequency

The SnapperHQ SMS program is 100% transactional. Estimated total volume across all photography businesses is approximately 1,700 messages per month. Message types include:

• Booking confirmations
• Day-before and day-of photo shoot reminders
• Daily digests to photographers listing their shoots for the day
• Photo gallery delivery notifications (containing a secure link only — no media is transmitted via SMS)
• Two-factor authentication (2FA) sign-in codes
• Customer-care responses to inbound messages

Message frequency varies based on your account activity and shoot schedule. Standard message and data rates from your wireless carrier may apply. Carriers are not liable for delayed or undelivered messages. SMS messages are sent in English only and to United States phone numbers only.

4.3 Opting out (STOP)

You may opt out of any SnapperHQ SMS messages at any time by replying STOP to any message you receive from us. Opt-out requests are processed automatically and immediately. After you reply STOP, you will receive one final confirmation message and no further SMS messages from SnapperHQ — except that you may continue to receive 2FA sign-in codes you have separately enabled, which you can disable in your account settings.

If you wish to resume receiving SnapperHQ SMS messages after opting out, you can re-subscribe by re-checking the SMS consent box in your account settings or by replying START, UNSTOP, or SUBSCRIBE to the SnapperHQ number.

4.4 Help (HELP)

Reply HELP to any SnapperHQ message to receive support contact information, or email info@snapperhq.com.

4.5 Quiet hours

SnapperHQ does not send non-time-sensitive SMS messages between 9:00 PM and 8:00 AM in the recipient's local time zone. Time-sensitive 2FA sign-in codes may be delivered at any time because they are initiated by the user.

4.6 Reassigned numbers

If a phone number that previously consented to SnapperHQ messages is reassigned to a new wireless subscriber, that subscriber may opt out at any time by replying STOP. We honor every opt-out immediately regardless of who originally consented.

4.7 No marketing on this channel

4.8 We do not share your phone number

4.9 Consent records

We retain records of your SMS opt-in (including timestamp, IP address where available, source of the consent, and the verbatim consent language presented to you) and any subsequent opt-out, for as long as required by applicable law and carrier requirements.

4.10 Compliance with applicable laws

SnapperHQ's SMS program complies with the federal Telephone Consumer Protection Act (TCPA), the CTIA Messaging Principles and Best Practices, and applicable state laws including the Florida Telephone Solicitation Act (FTSA), the Washington Commercial Electronic Mail Act (CEMA), and the Oklahoma Telephone Solicitation Act.

5. Third-Party Platform Integrations

When you connect your social media and advertising accounts (Facebook, Instagram, Google Ads, LinkedIn, etc.) to SnapperHQ:

• We access only the permissions you explicitly grant
• We use your account data to create and manage advertising campaigns on your behalf
• We do not store your social media passwords
• You can revoke access at any time through your account settings
• We comply with each platform's data usage policies

Google Services Integration

When you connect Google Drive and Calendar to SnapperHQ for our automatic delivery system:

• Google Drive — Initial Setup: We create a main business folder structure with organized subfolders for workflow management
• Google Drive — Order Folders: For each photo shoot, we create dedicated folders with "Photos - Raw Files", "Video - Raw Files", and "Edited" subfolders
• Google Drive — File Operations: We monitor only the "Edited" folders for automatic import of processed photos into our platform
• Google Drive — Data Scope: We only access folders and files created by our application. We never access personal files or any content outside our created folder structure
• Google Calendar: We create photo shoot appointment events. We do not read, access, or modify existing calendar events
• All Google integrations are used exclusively for our automated photo delivery and scheduling workflow
• You can disconnect Google services at any time through account settings

Stripe and Stripe Connect

SnapperHQ uses Stripe as its payment processor and Stripe Connect to facilitate payouts to photography businesses. When a photography business onboards to SnapperHQ, that business creates a Stripe Connected Account and accepts Stripe's Connected Account Agreement. Information collected by Stripe during onboarding (legal name, business address, tax identification, bank account) is processed and stored by Stripe under Stripe's Privacy Policy. SnapperHQ receives only the payment-status, payout, and tax information necessary to operate the platform.

6. How We Use Your Information

• Provide, maintain, and improve our platform services
• Enable booking, scheduling, photo delivery, and business-management workflows
• Process payments, payouts, invoicing, and send transaction confirmations
• Send transactional SMS messages and email notifications you have opted in to receive
• Provide customer support and technical assistance
• Send service notifications, updates, and security alerts
• Analyze platform usage to enhance functionality and user experience
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Ensure compliance with legal and regulatory requirements

7. Service Providers and Sub-Processors

We use the following service providers to operate SnapperHQ. Each is bound by contractual data-protection obligations and processes data only on our instructions.

We will provide reasonable advance notice of changes to our list of sub-processors that affect business customers, in accordance with applicable data-processing obligations.

8. AI and Automated Processing

SnapperHQ uses third-party AI APIs (Anthropic, OpenAI, and Google AI) to power features such as listing-content generation, video scripts, customer-support assistance, and similar automation. When you use these features:

• Inputs are transmitted to the relevant AI provider only as necessary to generate the requested output
• Per the API terms of each provider, your inputs are not used to train the providers' general-purpose models
• SnapperHQ does not make solely automated decisions that produce legal or similarly significant effects on you
• You may request that we limit the use of AI features in connection with your account by contacting us

9. Information Sharing and Sale of Personal Information

SnapperHQ does not sell or share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (as amended by the California Privacy Rights Act) or under comparable laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or other states.

We share personal information only in the following limited circumstances:

• With your explicit consent or at your direction
• With service providers and sub-processors listed in Section 7
• With advertising platforms (e.g., Facebook, Google Ads) only when you affirmatively connect those accounts to SnapperHQ and only to operate the campaigns you create
• In connection with a corporate transaction such as a merger, acquisition, or asset sale (subject to confidentiality protections)
• When required by law, subpoena, court order, or to protect our rights, your safety, or the safety of others

10. Data Security

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Row-level security policies enforced at the database layer
• Regular security reviews and dependency updates
• Limited access to personal data on a need-to-know basis
• Secure data centers and infrastructure operated by reputable cloud providers
• SMS opt-in records and phone numbers are protected by the same controls and are accessible only to authorized personnel and to our SMS messaging provider, sent.dm

In the event of a confirmed data breach affecting your personal information, we will notify you and the applicable regulators within 72 hours of discovery, as required by GDPR and applicable state laws.

11. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you request account deletion, we will delete your personal information within 30 days, except where retention is required by law or carrier requirements (for example, SMS consent and opt-out records, payment and tax records, and fraud-prevention logs).

12. Your Privacy Rights

12.1 Rights available to all users

• Access, update, or delete your personal information
• Disconnect third-party accounts at any time
• Export your data in a portable format
• Opt out of SMS messages at any time by replying STOP
• Request deletion of your account and associated data

12.2 California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, use, disclose, and (if applicable) sell or share; the right to delete; the right to correct; the right to data portability; the right to opt out of the sale or sharing of personal information; the right to limit the use of sensitive personal information; and the right to non-discrimination for exercising these rights. As stated above, SnapperHQ does not sell or share personal information for cross-context behavioral advertising.

12.3 Other US state residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other states with comprehensive consumer-privacy laws have similar rights to access, delete, correct, port, and opt out of certain processing of their personal information. To exercise these rights, contact us using the methods in Section 16.

12.4 EU/UK users

SnapperHQ does not actively market or solicit users outside the United States. If you are located in the European Economic Area, the United Kingdom, or Switzerland and have an account with us, you may have rights under the GDPR or UK GDPR including access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with your local supervisory authority. SnapperHQ does not currently maintain an establishment in the EU or UK and has not appointed an Article 27 representative; EU/UK users may direct privacy requests to the contact details in Section 16.

12.5 How to exercise your rights

Submit a privacy request by emailing privacy@snapperhq.com or by using the privacy controls in your account settings. We will verify your identity, respond to your request within 45 days (extendable by an additional 45 days where permitted), and accept requests submitted through an authorized agent with appropriate proof of authorization. SnapperHQ honors the Global Privacy Control (GPC) browser signal as a valid opt-out request where required by law.

13. Children's Privacy

Our services are not intended for children. We do not knowingly collect personal information from children under 13 (in the United States) or under 16 (in the European Economic Area and the United Kingdom). If we become aware of such collection, we will delete the information immediately.

14. International Users and Data Transfers

SnapperHQ stores and processes personal information in the United States. By using our services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have different data-protection laws than your country. SnapperHQ does not actively market or operate in the EU, UK, or other jurisdictions outside the United States.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and (where appropriate) sending an in-product notification or email.

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: