Privacy notice

Who we are

Unity Bridge Solutions Ltd, company 17080819, supplies HeySnapMe and is responsible for the personal information used by its website, account and licensing service. Our address is 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom.

For privacy questions or requests, email support@heysnapme.com.

Your captures and permissions

HeySnapMe does not upload your captures to our service. Screenshots, recordings, annotations and recognised text are processed and saved on your Mac. The local library also records capture time, file type, dimensions, duration, source app and window title.

You choose when to export, copy or share a capture. Your own cloud or backup software may copy files saved in folders it manages. If you send a file to support, we receive what you choose to send. Please leave out unrelated personal information, passwords and card details.

Screen recording permission allows capture. Microphone, camera and Accessibility permissions support features you choose to enable. You can manage these in macOS. The website demo can use the camera or microphone with your browser permission; its media stays in the browser or a file you download and is not uploaded to us.

Information used to run your account

• Your email, authentication identifiers and session information, using Clerk for sign-in. Clerk's bot protection checks basic browser and device signals during sign-in to block automated abuse.
• Account and purchase references, trial dates, licence status, connected-device history, and payment, cancellation, refund and dispute status.
• A product-specific device identifier, public signing key and Mac name. The identifier is derived from the Mac platform identifier; the raw platform identifier is not sent to our licensing service. These records are linked to your account and are not anonymous.
• The payment agreement text and version you accept, acceptance time and scheduled payment date. Stripe handles the payment method. Our licensing database stores payment references, not full card numbers or security codes, and the card identifier Stripe provides so each card can start one free trial.
• Recipient, message content, provider reference and delivery status for service emails. Our Postmark messages have open and click tracking disabled.
• Support correspondence, security events and technical connection information, including information our hosting, authentication, payment and download providers receive when you use their services.

Account and device information is necessary for activation. Card setup is necessary for a trial with automatic payment. We receive payment and delivery results from our providers as well as information you supply.

Why we use personal information

• Our contract with you: accounts, trial and lifetime access, connected Macs, payments, service emails, updates and requested support.
• Legitimate interests: proportionate account security, preventing fraud and replayed requests, and enforcing trial and licence limits. We balance those interests against your rights and minimise the information used.
• Legal obligations: records or disclosures required by an applicable law. We identify the obligation before relying on this basis.

Authorising a future card payment is separate from consent as a privacy-law basis. Our automated checks determine trial eligibility, payment status and the two-Mac limit. If a check incorrectly blocks your access, contact support for a human review.

Service providers and international processing

We use Clerk for authentication, Stripe for payments, Vercel for website and API hosting, Neon for the licensing database, Postmark for service emails, and Cloudflare for domains, downloads and inbound email forwarding. Messages to our branded addresses are forwarded to a Gmail inbox operated by Google.

Providers receive information needed for those functions. Stripe also processes some information for its own payment, security and legal purposes under its privacy policy. Gmail is used under Google's consumer privacy policy.

Our licensing API and database are configured in London. Other processing can take place abroad, including in the United States. Our service providers' data-processing terms provide contractual safeguards for restricted transfers, including standard contractual clauses with the UK addendum where applicable. Some providers also rely on adequacy arrangements, including the UK extension to the EU-US Data Privacy Framework for covered transfers. Google explains its arrangements in its transfer framework notice.

Contact support@heysnapme.com to ask which safeguard applies to your information or obtain a copy, subject to necessary redactions. We may also disclose information where required by law or necessary to establish or defend legal claims.

Cookies and browser storage

We use necessary sign-in and security cookies. Clerk's client cookies identify the browser and keep session information consistent; these can remain for up to 400 days and can be refreshed by use. Short-lived session cookies verify signed-in requests. Cloudflare security cookies on the sign-in service include a bot-detection cookie lasting about 30 minutes and a session cookie for rate limiting.

Checkout request identifiers are kept in browser session storage to prevent duplicate purchases when a request is retried. Stripe uses its own cookies and storage for secure checkout and fraud prevention; see Stripe's cookie policy. These can last beyond the checkout session.

We do not add advertising or audience-analytics cookies to this website. Blocking necessary cookies can prevent sign-in or payment. You can clear cookies and site storage in your browser.

How long we keep information

We assess retention by the purpose of each record, rather than keeping every record for a single fixed period:

• Keep the minimum account, ownership, purchase and active-device information needed to supply and recover your access.
• Keep payment authorisation and transaction evidence while needed to fulfil a purchase, resolve a refund or dispute, or meet an identified record-keeping obligation. Unnecessary message content and recipient copies are assessed separately.
• Keep expired-trial and inactive-device information only while proportionate for abuse prevention or an unresolved issue. Hashed device markers remain personal data and are not kept indefinitely solely to prevent another trial.
• Keep request challenges, retry records and security events while needed for validation, safe payment reconciliation or a documented security investigation.
• Keep support correspondence until the issue and any justified follow-up need end. Postmark's current message content and activity retention is 45 days; delivery summaries in our database and provider suppression records are assessed separately.

Requests are reviewed by our support team. We explain necessary retained records and any effect of removing ownership information on recovering your licence. Recovery copies may retain information separately until replaced or deleted; any restore must reapply approved removals. Signing out or uninstalling does not erase your online records or cancel a scheduled payment.

Your local captures remain until you remove them. Deleting a library item moves its media to macOS Trash. Exported copies and your own backups are separate, and we cannot remotely delete them.

Your rights and choices

You can request access, correction, deletion, restriction, or a portable copy where applicable. We may need proportionate identity verification. Rights depend on the processing and applicable law; we explain any information we must retain and why.

You can object to processing based on legitimate interests, including the security and abuse-prevention uses described here. Contact support@heysnapme.com for any of these requests.

You can complain to the UK Information Commissioner's Office or, where applicable, your local supervisory authority.

Age and changes to this notice

HeySnapMe accounts are for people aged 16 or over. We do not offer an under-16 account or parental-consent programme. If you believe an under-16 account exists, contact support so we can review it.

We update this notice when our practices change and provide relevant information before introducing a new use of your information.