Skip to content

Privacy Policy

Effective October 15, 2026

Snazzlo (“Snazzlo”, “we”, “us”) builds and hosts websites for small businesses with AI. This policy explains what we collect when you use snazzlo.com, the Snazzlo studio at studio.snazzlo.com, our iOS app, and the websites we host for you (together, the “Service”), how we use and share it, and the choices you have. Questions? Email hello@snazzlo.com.

Information we collect

Account information. You sign in with Google. Google shares your name, email address and profile picture with us. We never see your Google password.

Content you provide. The instructions and messages you send, files you upload (such as documents, menus, photos and PDFs), details about your business, and the websites we build for you.

Connected services. If you choose to connect another service, such as Gmail, Google Drive, Google Calendar, Google Sheets, Slack, Notion, GitHub, Stripe or Shopify, we store the access token that service gives us, encrypted, and access its data only to do what you ask. See “Google user data” below.

Form responses. When visitors fill out a form on a site we host for you, we store what they submit (for example their name, email address and message) on your behalf and send it to you.

Newsletter subscribers. When visitors sign up for a site's newsletter, we keep their email address (and name, if given) on the site owner's list and send the emails the owner writes to them. Every email has an unsubscribe link; once someone unsubscribes, an email bounces or a reader reports it as spam, we stop emailing that address. We record whether each email was delivered, not whether it was opened. When a site uses Visitor insights, links to that site in a newsletter carry a short code tied to the subscriber, so the owner can see when that subscriber visits the site from the email. Visitors in the EU and UK, and browsers that send Do Not Track or Global Privacy Control, aren't tracked this way.

Visitor statistics. For sites we host, we collect aggregated page views, referrers, countries and device types through Cloudflare Web Analytics, which doesn't use cookies.

Billing information. Payments are handled by Stripe. We don't store full card numbers; we keep your plan, subscription status, invoices and the usage we bill for.

Usage and device information. Logs such as IP address, browser type and timestamps, records of the work the Service does for you (used for billing and spending limits), and, if you use our iOS app and allow notifications, a push notification token.

Cookies. We use a sign-in cookie to keep you logged in and short-lived cookies for preview links you share. We don't use advertising or cross-site tracking cookies. Forms on hosted sites may use Cloudflare Turnstile to block spam.

How we use information

  • To provide the Service: build, edit, host and publish your websites, and carry out the tasks you ask for.
  • To send you form responses, service emails and, if you allow them, push notifications.
  • To bill you, enforce your spending limit and prevent fraud.
  • To keep the Service secure, prevent abuse and fix problems.
  • To respond to your requests for support.

We don't sell your personal information, we don't show ads, and we don't use your content or any Google user data to train or improve generalized AI or machine learning models.

Google user data

What we access. When you sign in with Google: your name, email address and profile picture. Only if you connect them, and only with the permissions you approve on Google's consent screen: Gmail (read-only), Google Drive files, Google Calendar (reading events, and creating or updating events when you ask) and Google Sheets.

How we use it. Sign-in data is used to create and secure your account. Connected Google data is used only to provide features you request, such as reading an email, document, spreadsheet or calendar event you ask Snazzlo to use for your website or task, or adding an event when you ask.

How we share it. Google user data is shared only as needed to provide the features you request: with the AI model providers that process your request and with the infrastructure providers that run the Service (listed below). We don't sell it, use it for advertising, or use it to train generalized AI or machine learning models. People at Snazzlo don't read it unless you ask us to (for example for support), it's needed for security or to investigate abuse, or the law requires it.

Storage, protection and deletion. Access tokens are encrypted at rest. You can disconnect a Google service at any time in the studio, which deletes our stored token, and you can revoke Snazzlo's access at myaccount.google.com/permissions.

Snazzlo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we share information

We share information only with service providers that help us run the Service, under contracts that limit their use of it:

  • Google Cloud: hosting, databases, file storage and backups.
  • Cloudflare: hosting and delivering websites, DNS, visitor statistics and spam protection.
  • AI providers: Anthropic, and OpenRouter and the model providers it routes to when you choose those models, to process your requests; fal.ai to create images.
  • Stripe: payments and invoices.
  • Resend: sending emails, such as form responses, account notices and site owners' newsletters to their subscribers.
  • Apple: delivering push notifications to the iOS app.
  • Bright Data: fetching public web pages you ask us to use, when a site blocks ordinary requests.

We may also share information if the law requires it, to protect the rights, safety or property of Snazzlo, our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply. Anything you publish on a public website is visible to anyone who visits it.

Your websites and their visitors

For information your website collects from its visitors, such as form responses and newsletter signups, you decide what to collect and we process it on your behalf. You're responsible for telling your visitors how you use it, and for only emailing people who asked to hear from you.

How long we keep information

We keep your account information and content while your account is active. Detailed usage records are kept for 90 days; billing records are kept as long as needed for accounting and legal purposes. Form responses are kept until you delete them or your account. When you delete a site or your account, we delete the related data within 30 days, except for copies in backups, which are removed on their normal schedule, and records we must keep by law.

Security

We use encryption in transit (HTTPS), encrypt stored access tokens, and limit who can access production systems. No method of transmission or storage is perfectly secure, but we work to protect your information.

Your choices and rights

You can ask us to access, correct, export or delete your personal information, and you can disconnect any connected service in the studio at any time. To make a request, email hello@snazzlo.com. We'll respond within 30 days.

California residents have the right to know what personal information we collect, use and disclose, to ask us to delete or correct it, and not to be discriminated against for exercising these rights. We don't sell personal information or share it for cross-context behavioral advertising.

If you're in the European Economic Area or the United Kingdom, you also have the right to object to or restrict our processing and to complain to your local data protection authority. We process your information to provide the Service you signed up for, for our legitimate interests in running and securing it, and to meet legal obligations.

International transfers

Snazzlo is based in the United States, and our providers may process information in the United States and other countries. By using the Service, you understand your information will be processed there.

Children

The Service isn't directed to children under 13 (or under 16 in the European Economic Area), and we don't knowingly collect their personal information. If you believe a child has given us information, email hello@snazzlo.com and we'll delete it.

Changes to this policy

We may update this policy. If we make material changes, we'll tell you by email or in the Service before they take effect. The date at the top shows when it last changed.

Contact

Snazzlo, San Jose, California, USA. Email hello@snazzlo.com.