Snapkey CRM — Privacy Policy

This Privacy Policy applies to information processed in connection with:

• Snapkey CRM websites, applications, and dashboards;
• account registration and sign-in;
• social media account connection and authorization;
• content creation, storage, scheduling, and publishing;
• analytics and reporting functionality;
• workspace, tenant, and multi-user CRM access;
• customer support and communications; and
• security, logging, and operational monitoring.

This Privacy Policy does not apply to third-party websites, applications, or services that we do not own or control, even if they integrate with Snapkey CRM.

We may collect the following categories of information.

We collect information in the following ways:

• directly from you when you create an account, log in, upload media, create posts, or contact support;
• from your organization or workspace administrator where your access is provisioned through a business account;
• from connected third-party services through APIs and OAuth authorization flows;
• automatically through logs, cookies, browser storage, session handling, and system monitoring; and
• from service providers who support hosting, media delivery, storage, security, and analytics functions.

We use collected information to operate, maintain, secure, and improve Snapkey CRM, including to:

• create and manage accounts, users, and workspaces;
• authenticate users and maintain secure sessions;
• connect, manage, and refresh social media integrations;
• create, schedule, queue, publish, update, and delete posts;
• upload, host, organize, and manage media;
• provide dashboards, analytics, status indicators, and reports;
• monitor integration performance and platform health;
• troubleshoot errors, failed posts, and service issues;
• improve functionality, usability, and product reliability;
• prevent fraud, abuse, unauthorized access, and misuse;
• enforce our Terms and applicable platform rules;
• comply with legal obligations and valid governmental requests; and
• communicate service updates, notices, and support responses.

Where applicable under GDPR-style principles or similar privacy laws, we process personal data on one or more of the following bases:

• performance of a contract with you or your organization;
• our legitimate interests in operating, securing, and improving Snapkey CRM;
• your consent, including consent granted during social account connection and authorization flows;
• compliance with legal obligations; and
• protection of our rights, systems, users, customers, and business interests.

Snapkey CRM integrates with third-party platforms, including Meta services such as Facebook and Instagram, LinkedIn, Twitter/X, and other supported services. When you connect these services:

• you authorize Snapkey CRM to access approved data and perform approved actions on your behalf;
• we use API-provided data only for the operation of authorized product features such as account connection, scheduling, publishing, reporting, and account management;
• your use of those connected services remains subject to the provider's own terms and policies; and
• connected data may become unavailable, incomplete, or restricted if the provider changes its API, permissions, or policies.

Snapkey CRM may use cookies, browser storage, secure session cookies, local storage, session storage, and similar technologies to:

• keep users signed in;
• maintain secure sessions;
• support embedded or webview access experiences;
• remember user preferences;
• improve performance and reliability; and
• support security and technical diagnostics.

If you disable certain browser storage or cookie functions, some features of Snapkey CRM may not work properly.

We may share information only as reasonably necessary for legitimate business and operational purposes.

We retain data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, security, legal compliance, and business continuity. In general:

• account and workspace information may be retained while the account or workspace remains active;
• connected social account records may be retained until disconnected, deleted, or no longer required;
• posts, scheduling history, publishing outcomes, and media references may be retained for operational use, analytics, troubleshooting, and audit purposes;
• logs, diagnostics, and technical records may be retained for security, system integrity, and performance monitoring;
• some records may be retained longer if required by law, dispute resolution, tax obligations, fraud prevention, or legitimate enforcement needs.

When retention is no longer necessary, we will delete, anonymize, or de-identify information where reasonably practicable.

We use reasonable technical, administrative, and organizational safeguards designed to protect information processed through Snapkey CRM, including:

• authentication and access controls;
• tenant and workspace separation;
• encrypted storage of sensitive integration tokens where supported;
• secure session handling;
• monitoring and operational logging;
• limited internal access to sensitive data;
• storage and infrastructure controls provided by trusted providers; and
• security review and incident response processes as appropriate to the service.

Depending on infrastructure, hosting, vendors, and integrations, data may be processed in countries other than the country in which you are located. Where applicable, we take reasonable steps to ensure that such transfers are subject to appropriate safeguards and are handled in accordance with applicable law.

Subject to applicable law, you may have the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• object to certain processing activities;
• request restriction of processing in certain circumstances;
• withdraw consent where processing is based on consent;
• revoke access granted to connected third-party platforms;
• request information about how your data is processed; and
• request closure of your account or workspace, where applicable.

You may also:

• disconnect social accounts from Snapkey CRM;
• revoke permissions directly within Facebook, Instagram, LinkedIn, Twitter/X, or other connected services;
• delete content or media from within the platform where features permit; and
• contact us with privacy or deletion requests.

We may need to verify your identity or authority before responding to certain requests.

You may request deletion of your Snapkey CRM data by contacting us through our official support or privacy channels. Deletion requests may include:

• account deletion
• workspace deletion
• deletion of connected account records
• deletion of scheduled or stored content
• deletion of media and associated records

We may retain limited information where necessary to comply with legal obligations, resolve disputes, prevent fraud, maintain system integrity, or enforce our rights. For details on how to submit such a request, users should refer to our separate Data Deletion Instructions page.

Snapkey CRM is intended for business and professional use and is not directed to children. We do not knowingly collect personal data from children in violation of applicable law. If we become aware that such information has been collected improperly, we will take reasonable steps to delete it.

Snapkey CRM may rely on or integrate with third-party products and services, including social media providers, cloud hosting services, storage vendors, analytics providers, and media processing tools. Those third parties operate under their own terms and privacy policies. We encourage users to review the privacy terms of any third-party service they connect to Snapkey CRM.

Snapkey CRM is designed to process connected social account data, posting data, and analytics information only for legitimate service functionality such as account connection, content scheduling, publishing, customer workflow management, reporting, and security.

We may update this Privacy Policy from time to time to reflect changes in law, platform requirements, product functionality, security practices, or business operations. When we do so, we will post the updated Privacy Policy on the relevant public page and revise the effective date. Continued use of Snapkey CRM after such an update constitutes acknowledgment of the revised Privacy Policy to the extent permitted by law.

If you have questions, concerns, or requests relating to this Privacy Policy, privacy rights, or data deletion, please contact: