Privacy Policy

Last updated: 7 September 2026

This policy explains what personal data Harpreet Singh ("we") collects when you use any of our Services listed at hsingh.app or on their own domains, and how we use and protect it. Product-specific details, where they differ, are noted in that product's own privacy page and take precedence.

Who is responsible

Harpreet Singh, sole proprietor, is the data controller. Contact: [email protected].

What we collect

Account data: name, email address, password hash, and any profile information you add.
Billing data: plan, invoices, billing address and tax ID if provided. Card numbers are collected and stored by Stripe, our payment processor; we only see the card brand, last four digits and expiry.
Usage data: API requests, renders, files processed, features used, timestamps, IP addresses and user-agent strings, kept in server logs for security, rate limiting and billing.
Content you submit: URLs, files, images, code, text and other inputs needed to deliver the Service. Where a product is described as end-to-end encrypted (where a product states so), content is encrypted in your browser and we cannot read it.
Support correspondence: emails you send us.
Cookies: strictly necessary cookies for sessions and security. We do not use advertising cookies or third-party tracking pixels. Where analytics are used they are privacy-preserving and aggregated.

Why we use it

To provide, operate and support the Services you signed up for (performance of contract).
To bill you, prevent fraud and comply with tax and accounting law (legal obligation and legitimate interest).
To secure the Services, enforce quotas and investigate abuse (legitimate interest).
To send service emails such as receipts, renewal notices, security alerts and changes to terms. Marketing emails are sent only with your consent and always include an unsubscribe link.

Stripe for payment processing (see Stripe's privacy policy).
Hosting and storage providers (our own servers in the EU at Hetzner, Cloudflare for DNS/CDN, Cloudflare R2 for object storage) acting as processors under our instructions.
Email delivery for transactional mail from our own mail server at hsingh.app.
AI model providers only for features that explicitly use AI, and only with the content you submit to that feature. We do not use your content to train models.
Authorities when legally required.

We never sell personal data.

Retention

Account and billing records are kept while your account is open and for up to 7 years afterwards where tax law requires. Server logs are kept for up to 90 days. Uploaded content is kept as long as your account or the product's stated retention period requires (for example, uploaded render inputs in snaplab are discarded after processing). You can delete your account and content at any time from the dashboard or by email.

International transfers

Our servers are in the European Union. Where a processor is outside the EU/UK, we rely on standard contractual clauses or an equivalent lawful mechanism.

Your rights

Depending on where you live you may have the right to access, correct, delete, export or restrict processing of your personal data, to object to processing, and to withdraw consent. Email [email protected] and we will respond within 30 days. You also have the right to complain to your local data-protection authority.

Security

All traffic is encrypted with TLS. Passwords are hashed. Access to production systems is restricted and logged. If a breach affecting your data occurs we will notify you and the relevant authority as required by law.

Children

The Services are not directed at children under 16 and we do not knowingly collect their data.

Changes

We will post any changes here and update the date above. Material changes will be announced by email.