Privacy Policy

Controller (Imprint)

1. Who we are

Cado Holdings OÜ ("we", "us", or "our") is the data controller when you visit snaips.com or use its services. We are responsible for processing your personal data under the EU General Data Protection Regulation (GDPR).

2. What data we collect and why

We only collect the data necessary to provide our services:

• Account data: For example, name and email address if you create an account or are invited to use a service. Required to create the account, sign you in, and communicate with you.
• Service data: Information you submit through the site's forms or services. We process this data only to fulfil the purpose for which it was provided.
• Technical data: IP address and standard server logs. Needed to keep the site secure, troubleshoot errors, and maintain operations.
• Website usage and campaign data: Page views on public marketing pages, referring site, campaign parameters, and successful submission of the contact form. We use this information to evaluate the website and advertising campaigns. Names, email addresses, phone numbers, and messages entered in the form are not sent to analytics or advertising providers.
• Consent records: A random browser-specific identifier, your choice, the time of the choice, language, and the version of the consent notice shown to you. We do not attach an IP address, user account, or contact details to this record.

3. Cookies, analytics, and advertising measurement

We use strictly necessary cookies for sign-in (.AspNetCore.Identity.Application), language preference (.AspNetCore.Culture), CSRF protection, and remembering your advertising-measurement choice (snaips_ads_consent). These cookies are needed to provide requested functions and respect your privacy choice, so they are used without separate consent. The consent choice remains in your browser for 180 days.

On public marketing pages we use Simple Analytics for cookieless, aggregated traffic measurement. It is not loaded on account, audit, agreement, or administration pages, and we respect the browser's Do Not Track setting.

On public marketing pages we use Google Ads Consent Mode v2 to measure advertising campaigns and successful contact requests. Before you choose, or if you reject measurement, the Google tag operates in a restricted cookieless mode: advertising storage, advertising-related user data, and personalization are denied, ad-click identifiers are redacted from measurement requests, and Google may receive limited technical measurement signals. If you allow measurement, Google may set advertising-measurement cookies beginning with _gcl_ and use advertising-related data for conversion measurement. Personalized advertising and remarketing remain disabled.

You can change your choice at any time using the Cookie settings button in the site footer. Withdrawing consent disables advertising storage and removes accessible first-party _gcl_ cookies from your browser. More information about Google's use of data: Google Business Data Responsibility.

4. Lawful basis for processing

We process your data under the GDPR on these bases:

• Performance of a contract: To deliver the services we provide after an account or equivalent arrangement is in place.
• Legitimate interest: Keeping the site secure and operational, cookieless aggregated website and campaign measurement, demonstrating that consent choices are respected, and responding to communication based on the information you provide.
• Consent: The use of Google Ads advertising cookies and advertising-related user data for conversion measurement. You can withdraw consent at any time without affecting processing carried out before withdrawal.

5. How we share your data

We do not sell your personal data. We use the following trusted sub-processors to run our infrastructure:

• Microsoft Azure (EU) — application and database hosting.
• Resend (resend.com) — delivery of transactional email.
• Simple Analytics (simpleanalytics.com) — cookieless, aggregated traffic measurement on public marketing pages.
• Google Ireland Limited — Google Ads campaign and conversion measurement according to your consent choice.

Providers may process data outside the EU/EEA under appropriate transfer mechanisms such as the EU Standard Contractual Clauses. We may also disclose data to authorities if required by law.

6. Data retention

We retain your personal data only for as long as your account is active or as required by law (e.g. accounting legislation). You can request deletion of your account and associated data by contacting privacy@snaips.com.

Consent-choice records are retained for three years after the latest change and are then deleted automatically. The browser consent cookie expires after 180 days. Data processed by Google Ads and Simple Analytics is also subject to the retention periods configured by those services.

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data (the "right to be forgotten").
• Restrict or object to certain types of processing.
• Receive a copy of your data in a machine-readable format (portability).

To exercise these rights, or for any questions about this policy, contact privacy@snaips.com.

You also have the right to lodge a complaint with the data protection authority in your country of residence. In Estonia this is Andmekaitse Inspektsioon; in Finland the Office of the Data Protection Ombudsman.

8. Changes to this policy

We update this policy when needed. We notify registered users of material changes by email. The current version is always available on this page, and the date shown at the top reflects the most recent update.