Privacy Policy
Last updated: 2026-10-18
1. Who we are
Snaggable (dev.snaggable.co) is operated by snaggable.co, hello@snaggable.co, which is responsible for your personal data ("we", "us"). Questions and requests: grievance@snaggable.co.
We follow India's Digital Personal Data Protection Act, 2023 and, for people in the European Economic Area and the UK, the GDPR.
2. What we collect and why
| Data | Why we use it | Basis |
|---|---|---|
| Account: name, email, password (stored only as a secure hash), sign-up and sign-in dates, whether your email is confirmed, email preferences, password-reset requests | To run your account, show Provider contact details to signed-in users, and secure sign-in | Contract; consent where required |
| Project requests: project details, budget, timeline, and your name, email, phone and company | To review your project and share it with the Providers that accept it. Your email and phone are shared with a Provider only when you reply to it, share them, or hire it | Your consent when posting; contract |
| After hiring: check-in answers, reviews (public text and ratings; an optional private note), private ratings of buyers by providers. Your review text and ratings are shared with the reviewed company (privately first for critical reviews) and published; your private note and contact details are never shared with it | To publish verified reviews, catch problems early and keep the directory trustworthy | Legitimate interest; consent for reviews |
| Problem reports: each side's account and the evidence files they upload | To review reports and take platform actions. Files are seen only by our team and deleted a year after the case is closed | Legitimate interest in safety; legal claims |
| Quotes and messages between Buyers and Providers, and whether a quote was viewed | To let you compare quotes and talk privately. Only the two parties see a conversation; our team reads messages only to handle a report or abuse | Contract; legitimate interest in safety |
| Provider profiles and claims: details you add to a profile, work email and messages used to verify a claim, business hours | To publish and manage your profile, verify that you represent it, and send you projects | Contract; legitimate interest in accurate listings |
| Identity checks for freelancers and teams: names, roles, emails and profile links (LinkedIn, Facebook, GitHub…) of each person | To confirm each person is real and agreed to be listed, and to prevent identity misuse. Never shown publicly or shared outside Snaggable | Consent of each person (confirmed by email); legitimate interest in preventing fraud |
| Business contact emails we found: a publicly listed business address (for example info@ or contact@) for profiles that haven't been claimed | To invite the business to claim its free profile and tell it about matching projects (anonymous summaries only). At most a few emails, each with one-click "Don't email me again" and "Remove our listing" links. The address is retired as soon as the profile is claimed | Legitimate interest; you can object at any time |
| Project email chosen by a profile's owner | To send that business its project requests and messages; confirmed with a one-click link | Contract |
| Business listings we created: business name, website, phone, address, services and similar details from publicly available sources, which can include names of founders or freelancers | To show a directory of Providers; businesses can claim, correct or remove their listing | Legitimate interest; you can object at any time |
| Pro pack records: purchases, lead balance, projects accepted | To provide the Pro pack and keep accounting records | Contract; legal obligation |
| Team access and sharing: who has access to a company profile or a shared project, their role, invitations (email address) and which person did what (accepted a project, sent a quote, wrote a message) | To let you work together and show your team who did what. Providers don't see who a buyer shares a project with | Contract |
| Files shared in project conversations: documents and images you attach to messages | To let buyers and providers exchange project files. Only the people in that conversation (and our team, for problem reports) can download them. Stored privately with our storage provider (Bunny, EU) and deleted 90 days after the project ends, unless a problem report is open | Contract |
| Follow-ups and tips: which occasional emails we sent you (after a completed project, and a few updates a year), and your choice to receive them | To remind you we're here for your next project and share useful updates. At most 4 a year, never while a project is in progress; unsubscribe with one click or in Settings | Legitimate interest as an existing customer; you can object at any time |
| Share links: your personal share code, and which accounts were created through it | To see how people discover Snaggable. We never email anyone on your behalf | Legitimate interest |
| Satisfaction and testimonials: your 0–10 answer to "how likely are you to recommend us", optional private feedback, and, if you choose to share one, your testimonial with the name details you pick | To improve the service and, only with your consent, to show your testimonial on our website and marketing. You can ask us to remove it at any time | Consent (testimonials); legitimate interest (feedback) |
| Two-factor authentication: your authenticator secret (encrypted) and one-time backup codes (stored only as irreversible hashes) | To protect your account if you turn on 2FA | Contract; legitimate interest in security |
| Sign-in history: time, IP address and browser of each sign-in and failed attempt, kept for 90 days | To detect and stop account takeovers and abuse | Legitimate interest in security |
| Security data: short-lived counters linked to a hashed identifier derived from your IP address, and failed sign-in counts | To limit abuse and automated scraping and protect accounts | Legitimate interest in security |
| Emails you send us | To answer you and handle requests | Legitimate interest; consent |
Live projects board: approved projects appear publicly as anonymous summaries (service, budget range, your region, start time, the type of provider wanted and status). Your project's title is shown only if you tick the box when posting, and we may shorten it. The description, your name and contact details are never shown.
Profile view counts are simple counters per company page; they don't record who viewed a page. We don't use advertising or analytics cookies, and we don't sell personal data.
3. Cookies
- dsid: keeps you signed in and protects forms. Deleted when you close your browser.
- g_pass: set for about 15 minutes after you pass a "checking your browser" step, so you aren't asked again.
- When that check is shown, Cloudflare Turnstile may set its own cookies and process technical signals from your browser to tell people from bots.
These are strictly necessary for the site to work and stay secure, so they don't need consent.
4. Who we share data with
- Providers that accept your project receive your project; your email and phone only when you reply to them, share them, or hire them. Providers you contact through their profile receive whatever you send them.
- Service providers that work for us: our hosting provider; email delivery; Cloudflare (Turnstile bot checks); Google Fonts (your browser loads fonts from Google, which receives your IP address); payment providers when you buy a Pro pack; Brave Search API (we send search terms such as "web design agency Berlin", never personal data about you). They may only use the data to provide their service to us.
- Authorities, when the law requires it, or to protect our rights, users and the public, including against fraud and scraping.
- A buyer of our business, if Snaggable is ever sold, under the same protections.
Some of these providers process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.
5. How long we keep data
- Accounts: while your account is open, and up to 12 months after closing it for security and legal purposes.
- Projects: up to 24 months after the project closes, so Buyers and Providers can refer back to them.
- Identity-check profile links: deleted 30 days after our review decision. Team members' emails are kept while they remain on the team, so they can leave it at any time.
- Security counters: removed within about 2 days.
- Payment and accounting records: as long as tax law requires.
- Business listings: until the business asks us to remove them or we stop showing them.
6. Your rights
You can ask us to access, correct, update or delete your personal data, withdraw consent, or object to how we use it. In the EEA and UK you also have rights to restrict processing and to data portability, and can complain to your data protection authority. Under Indian law you can also nominate someone to exercise your rights if you're unable to.
A business or person shown in a listing we created can ask for it to be corrected or removed. Write to grievance@snaggable.co; we reply within 30 days and may ask you to confirm your identity.
Grievance Officer: Grievance Team, grievance@snaggable.co.
7. Security
We use encrypted connections (HTTPS), hashed passwords, limited admin access, rate limiting and bot checks. Verification data is stored separately from public profiles. No system is perfectly secure; if a breach affects you, we'll notify you and the authorities as the law requires.
8. Children
Snaggable is for businesses and professionals and is not intended for anyone under 18. We don't knowingly collect data from children.
9. Changes
We'll update this policy when our practices change, change the "last updated" date, and tell registered users about significant changes.
10. Contact
snaggable.co, hello@snaggable.co. Email: grievance@snaggable.co. See also our Terms of Use.