Privacy Policy

At Snack (“Snack Technologies, Inc.,” “we,” “us,” or “our”), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and related services (collectively, the “Services”).

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

1. Information We Collect

a. Information You Provide

We collect information you voluntarily provide when you use our Services, including:

• Account & Profile Information: name, email address, profile picture, job title, and organization name when you create an account or update your profile.
• Authentication Credentials: passwords or OAuth tokens (e.g., Google sign-in) used to access your account. Passwords are stored only in hashed form.
• Content You Upload: videos, images, documents (PDFs, Office files), and other materials you create, upload, or record through the Services.
• Interactive Responses: answers to quizzes and knowledge-check questions within learning content.
• Discussions & Comments: messages you post in group discussions.
• Billing Information: when you subscribe to a paid plan, our payment processor collects your payment method and billing details on our behalf (see Section 3 below).
• Newsletter & Marketing: your email address when you subscribe to our newsletter or other marketing communications.
• Support Requests: information you provide when you contact us for help or submit feedback.

b. Information Collected Automatically

When you access or use our Services, we may automatically collect:

• Device & Browser Data: browser type, operating system, screen resolution, and general device identifiers.
• Log Data: IP address, access times, pages visited, referring URLs, and HTTP request metadata.
• Learning Analytics: video watch progress, quiz responses, completion rates, and mastery scores to track learning engagement.
• Diagnostic Data: when errors occur in the application, we may automatically collect error details, navigation breadcrumbs, and your user agent to help us identify and fix issues. This data may include your user identifier and organization name.

c. Information Processed by AI Features

If your organization enables AI-powered features (such as automatic transcription or AI-generated quiz questions), portions of your content—such as video audio and transcript text—are sent to our AI service providers for processing. These providers operate under zero-data-retention agreements and do not use your content to train their models. See Section 3 for details on how this data is shared.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide & Operate the Services: create and manage your account, authenticate sessions, deliver video content, process uploads, and enable team collaboration.
• Billing & Subscriptions: process payments, manage subscription plans, and communicate billing-related information.
• Learning & Analytics: track learning progress, generate engagement insights for learners and organization administrators, and personalize the learning experience.
• AI-Powered Features: transcribe video audio, generate quiz questions, and create content summaries when these features are enabled by your organization.
• Communications: send transactional emails such as invitations, assignment reminders, and account notifications.
• Security & Diagnostics: detect fraud, investigate errors, monitor service health, and maintain audit trails for sensitive operations (e.g., staff impersonation).
• Improvement & Development: analyze usage patterns to improve existing features and develop new ones.
• Legal Compliance: comply with applicable laws, respond to lawful requests, and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

a. With Your Organization

If you access the Services through an organization (employer, school, or other entity), administrators of that organization may view your profile information, learning progress, and usage analytics. The organization’s administrator controls data-retention settings that apply to content created within their workspace.

b. Service Providers

We engage third-party companies to help us operate and improve the Services. These providers process data only on our behalf and under contractual obligations to protect it. The categories of providers we use include:

• Cloud Infrastructure & Hosting: application hosting, database management, authentication, and content delivery.
• Video Processing: video encoding, hosting, streaming, and thumbnail generation.
• AI & Transcription: automated transcription of video audio and AI-powered content generation. All AI providers operate under zero-data-retention agreements and do not train models on your content.
• Payment Processing: a PCI-compliant payment processor handles all payment card data. We do not store full card numbers on our servers.
• Email Delivery: sending transactional emails such as invitations, assignment notifications, and account alerts.
• Error Monitoring & Diagnostics: automated error-reporting tools that help us detect and resolve issues. Diagnostic reports may include user identifiers and contextual information needed to reproduce and fix problems.

c. Legal Requirements

We may disclose information if we believe in good faith that disclosure is necessary to comply with applicable law, a court order, or a government or regulatory request.

d. Business Transfers

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

e. With Your Consent

We may share information for other purposes when you give us explicit consent to do so.

4. Cookies and Similar Technologies

We use cookies and browser storage technologies to operate and improve the Services. The types of technologies we use include:

• Authentication Cookies: keep you securely signed in to your account across sessions.
• Functional Cookies: remember your active organization, display preferences, and playback settings so the Services work correctly.
• Performance & Analytics: anonymized, aggregated metrics that help us understand how the Services are used and where we can improve performance.
• Local & Session Storage: your browser’s local storage and session storage are used to save UI preferences (such as sidebar state and playback speed) and temporary navigation context for diagnostic purposes.

You can control cookies through your browser settings. Disabling authentication or functional cookies may prevent you from signing in or using certain features of the Services.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS) and at rest
• Role-based access controls and authentication requirements
• Immutable audit logging for sensitive administrative operations
• Regular security assessments and monitoring
• Time-limited, signed URLs for access to stored media

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. General retention guidelines include:

• Account Data: retained until you or your organization administrator deletes the account.
• Content (Videos, Documents): retained until deleted by the content owner or organization administrator.
• Transcripts: retention is configurable by organization administrators, ranging from immediate deletion after processing to indefinite retention.
• Learning Analytics: detailed per-user analytics are retained for a limited period; aggregated metrics may be retained indefinitely.
• Audit Logs: retained for up to seven years to meet compliance requirements.
• AI Processing Data: deleted immediately after processing by our AI providers under zero-data-retention agreements.

When you request deletion of your account, we initiate a 30-day grace period during which you can recover your account. After this period, your data is permanently deleted from our primary systems and purged from backups within 90 days.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information, subject to legal retention requirements.
• Data Export: download your content, analytics, and account data in a portable format.
• Opt-Out: unsubscribe from non-essential communications at any time using the link in our emails.

To exercise these rights, please contact us at privacy@snack.video. We will respond to your request within the timeframe required by applicable law.

8. Children’s Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@snack.video, and we will take steps to delete such information promptly.

9. International Data Transfers

Our Services are primarily hosted in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data-protection laws than your country of residence. By using the Services, you consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated” date above. Your continued use of our Services after any changes indicates your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: