Privacy Policy

1. Scope

This Privacy Policy explains how SnapPoster, operated by CityShop OÜ, collects, uses, and protects data submitted by business clients. This policy applies to users in the European Union, United States, and other supported jurisdictions. We do not provide services to users located in the Russian Federation, Belarus, or any region engaged in or supporting armed aggression.

2. What Data We Collect

• Business contact information (e.g., company name, email)
• Facebook Page ID and access token (encrypted)
• Feed URLs and scheduling preferences
• Stripe billing metadata (we do not store payment details)
• Usage logs, AI prompts, and posting behavior

3. How We Use Your Data

• To deliver the SnapPoster service and AI-based feed generation
• To communicate onboarding and operational messages
• To track service usage, detect abuse, and ensure uptime
• To analyze patterns, optimize product decisions, and inform our marketing
• To train AI systems or recommendation engines using anonymized content

4. Legal Basis (GDPR)

SnapPoster is intended for businesses. If personal data (e.g. contact name or email) is submitted, we rely on:

• Contractual necessity – to deliver what you subscribed to
• Legitimate interest – to improve the service and prevent abuse

5. Storage and Security

All data is stored securely in the EU (via DigitalOcean infrastructure). Facebook tokens are encrypted at rest. Traffic is encrypted (HTTPS). Only authorized personnel have access to client data.

6. Data Use and Processors

You agree that we may collect, use, and analyze all submitted and generated data for business purposes, including:

• AI training and prompt optimization
• Internal analytics, diagnostics, and commercial research
• Sales, marketing, and communication improvements

We do not resell or publish identifiable customer data.

We use the following processors under GDPR-compliant agreements:

• Stripe – billing and payment tracking
• Meta – for posting via Facebook Graph API
• SMTP2GO – transactional email delivery
• OpenAI – used only if you enable feed-based post generation
• DigitalOcean – hosting and data storage

7. Your Rights

If personal data has been submitted (e.g. contact person details), you may request:

• Access to your personal data
• Correction or deletion (if applicable)
• Export or restriction of that data

Contact: support@cityshop.ee. We will respond within 30 days as required by law.

8. Data Retention

We retain business usage data and logs for as long as your subscription is active. After termination, data may be retained for up to 12 months for security, billing, or analytics purposes unless otherwise requested.

9. Jurisdiction Limits

We do not permit use of our service from or by residents of the Russian Federation, Belarus, or other territories actively involved in armed aggression or sanctioned by the EU or US. Detection may result in account suspension or termination.

10. Contact

11. Changes

We reserve the right to update this Privacy Policy at any time. Significant changes will be communicated through the dashboard or email. Continued use of SnapPoster constitutes acceptance of the revised terms.