Privacy Policy
Last updated: September 2026
1. Who we are
Snappy is an AI-powered listing generator for UK secondhand sellers. Snappy Listing is a trading name of Micheal Jarvis, a sole trader based in the United Kingdom, who is the data controller responsible for your personal data. When this policy refers to "we", "us" or "Snappy", it means Micheal Jarvis trading as Snappy Listing. For questions about your data, contact us at hello@snappylisting.co.uk.
2. What data we collect
When you create an account, we collect:
- Your name and email address
- A hashed (encrypted) version of your password — we never store your password in plain text
- Your seller type preference (casual, regular, or power seller)
- Your referral code and who referred you, if applicable
When you subscribe to a paid plan, we additionally collect:
- Your subscription plan and status (managed via Stripe)
- Payment confirmation — we do not store card numbers or full payment details; these are held securely by Stripe
When you generate listings, we store:
- The AI-generated listing details (title, brand, price, description etc.)
- Whether you marked an item as sold and the platform it sold on
- The date and time of each listing
- Storage location tags if you add them
We also store the photos you upload. They are kept with the listing they created, because your listing history, the shareable listing page and the auto-relist tool all need the original images to work. Anthropic does not retain your photos after generating the listing — we do, for as long as the listing exists.
Your photos are deleted when you delete the listing or your account. Photo files are held at long, randomly generated web addresses that are not listed or searchable anywhere, but anyone you send a listing's share link to will be able to see its images — that is what the share link is for.
3. How we use your data, and our lawful basis
UK GDPR requires us to have a specific legal reason for each thing we do with your data. Ours are:
- To create and manage your account — performance of a contract
- To track how many listings you have used under your plan — performance of a contract
- To show you your listing history — performance of a contract
- To generate listings from your photos — performance of a contract
- To process your payments via Stripe — performance of a contract
- To process referrals and reward you with extra free listings — performance of a contract
- To keep the service secure and prevent fraud and abuse of free trials — our legitimate interests in running a service that is not being taken advantage of
- To improve the service through anonymous usage analytics — our legitimate interests in understanding how Snappy is used, using a tool that cannot identify you
- To send you product updates if you opt in — your consent, which you can withdraw at any time by unsubscribing
Where we rely on legitimate interests, we have considered whether it is fair to you, and you have the right to object — see section 8.
4. Third parties we share data with
We use the following third-party services to operate Snappy:
- Anthropic (Claude AI) — your uploaded photo and a prompt are sent to Anthropic's API to generate the listing. Photos are not retained by Anthropic after processing. See Anthropic's Privacy Policy.
- Supabase — our database provider, used to store your account and listing data securely. Data is hosted in the EU. See Supabase's Privacy Policy.
- Stripe — our payment processor, used to handle subscription billing. Stripe stores your payment method and billing details. We do not see or store your full card details. See Stripe's Privacy Policy.
- Vercel — our hosting and infrastructure provider. Your requests pass through Vercel's servers to reach our application. See Vercel's Privacy Policy.
- Resend — our email provider, used to send sign-in codes, receipts and any updates you have opted into. They process your email address and the contents of those messages. See Resend's Privacy Policy.
- Google — only if you choose to sign in with Google. Google confirms your identity to us and tells us your name and email address. See Google's Privacy Policy.
- Apple — only if you choose to sign in with Apple. Apple confirms your identity to us and, unless you choose to hide it, your email address. See Apple's Privacy Policy.
We do not sell, rent, or share your personal data with any other third parties.
5. Sending data outside the UK
Supabase, which holds your account and listing data, hosts it in the European Union. Anthropic, Stripe, Vercel and Resend are based in the United States, so using Snappy involves transferring some of your data there.
Each of those companies publishes a data processing agreement incorporating the UK International Data Transfer Addendum — the safeguard the UK government recognises for sending personal data abroad — and we rely on those agreements. You can ask us for more detail about any of them at any time.
6. Cookies and local storage
Snappy does not use tracking cookies or advertising cookies. We use your browser's local storage (similar to a cookie) solely to keep you logged in between visits. This data stays on your device and is not transmitted to us.
For anonymous usage analytics we use Plausible Analytics — a privacy-friendly, cookieless tool that does not track individuals, does not use cookies, and is fully GDPR-compliant. No personal data is collected by Plausible. See Plausible's Privacy Policy.
We do not use Google Analytics, Facebook Pixel, or any other third-party advertising or tracking tools.
7. How long we keep your data
We keep your account and listing data for as long as your account is active. If you delete your account, your personal data, your listings and the photos you uploaded are permanently deleted from our systems within 24 hours.
Two things outlive the deletion, and we would rather tell you than let you find out:
- A one-way fingerprint of your email address. New accounts get free listings, so without this the same address could delete and re-register over and over to collect them repeatedly. The fingerprint is generated in a way that cannot be reversed back into your email address — it can only answer "has this address had its free listings already?". It holds nothing else about you.
- Stripe's payment records, which they retain for their own compliance purposes as required by financial regulations. That is out of our hands.
8. Your rights (UK GDPR)
Under UK GDPR, you have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct any inaccurate data
- Erasure — delete your account and all associated data
- Portability — download your data in a machine-readable format
- Object — object to how we process your data
You can exercise your right to erasure directly from your profile page inside the app. To download your data, go to your profile and use the export option. For any other requests, contact us at hello@snappylisting.co.uk. We aim to respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection regulator — at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
9. Children’s privacy
You must be at least 18 to use Snappy, as set out in our Terms of Service. Snappy is not intended for children and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, please contact us and we will delete it immediately.
10. Changes to this policy
We may update this policy from time to time. We will notify registered users of any significant changes by email. Continued use of Snappy after changes means you accept the updated policy.
11. Contact us
For any questions about this privacy policy or how we handle your data, email us at hello@snappylisting.co.uk.