Privacy Policy

This policy explains what personal information we collect, why we collect it, and the choices you have. It applies to praisesnap.com, the PraiseSnap application, our hosted collection forms, and our embeddable widgets.

1. Who we are, and the two roles we play

PraiseSnap helps businesses ("Customers") collect testimonials from their own customers ("Submitters") and display them on websites via an embeddable widget.

• For Customer account data (your login, billing, settings), we are the data controller.
• For testimonial content submitted through a Customer's collection form, the Customer is the controller and we act as their data processor: we store and display that content on the Customer's instructions. If you submitted a testimonial and want it changed or removed, the fastest path is contacting the business you submitted it to; you can also contact us at info@aipera.com and we will assist.

2. Information we collect

Account holders (Customers):

• Email address and authentication data (managed via Supabase Auth; we never see or store your password in plaintext)
• Workspace and project names, settings, and content you create
• Billing information: our payment processor, Stripe, collects and stores your payment card details. We never receive or store full card numbers — we receive only a customer reference, subscription status, and the last four digits/brand for display.

Testimonial submitters:

• The information the form requests: name, and optionally role, company, star rating, testimonial text, a link, and an avatar photo you choose to upload
• A consent confirmation that the testimonial may be displayed publicly
• Technical data necessary to receive the submission (IP address in transient server logs, used for spam and abuse prevention)

Website and widget viewers:

• Our embeddable widget is deliberately built without tracking: it sets no cookies, uses no fingerprinting, and collects no personal information about people who merely view a widget on a Customer's site. Standard web server logs (IP address, user agent, requested URL) are retained transiently for security and capacity purposes.
• On praisesnap.com we use essential cookies (session authentication) and Google Analytics 4, which sets its own cookies to measure how the site is used — which pages are visited, and whether a visit ends in a signup or a subscription. We do not run advertising trackers, we have not enabled Google Signals or advertising personalisation, and we do not sell or share this data with advertisers.
• This applies to praisesnap.com only. Analytics is not loaded on the embeddable widget, so people who merely see a widget on a Customer's site are not measured by us at all. It is also not loaded on our administrative pages.

3. Why we process information (legal bases)

• To provide the service (contract): accounts, forms, moderation, widgets, billing
• Legitimate interests: security, spam prevention, service improvement, capacity planning
• Consent: a Submitter's testimonial is collected and displayed on the basis of the consent given at submission; marketing emails (if any) are sent only with consent and can be unsubscribed at any time
• Legal obligations: tax and accounting records, responding to lawful requests

4. Where your data lives, and who helps us process it

We use a small number of subprocessors, each bound by their own security and data-processing commitments:

Subprocessor	Purpose	Location
Supabase	Database, authentication, file storage	United States (US East)
Stripe	Payment processing and subscription billing	United States
Resend	Transactional email (password resets, notifications)	United States
Hostinger	Application server hosting	United States (Boston)
Google	Website analytics (praisesnap.com only)	United States

We do not sell personal information, and we do not share it with advertisers.

5. Retention

• Account data is retained while your account is active. If you delete your account, we delete or irreversibly anonymize personal data within 30 days, except records we must keep for legal, tax, or fraud-prevention purposes.
• Testimonials are retained until the Customer deletes them or closes their account.
• Transient server logs are rotated on a short cycle (typically 30 days or less).
• Backups roll off on the backup provider's schedule after deletion.

6. Your rights

Depending on where you live (including under GDPR and the CCPA/CPRA), you may have rights to access, correct, export, delete, or restrict the processing of your personal information, and to object to certain processing. You will not be discriminated against for exercising these rights.

To exercise any right, email info@aipera.com from the address associated with your data. We respond within 30 days. If you are in the EU/EEA or UK, you may also lodge a complaint with your supervisory authority. For California residents: we do not "sell" or "share" personal information as those terms are defined by the CPRA.

7. Security

We take proportionate technical and organizational measures: encryption in transit (HTTPS everywhere), row-level security isolating each Customer's data at the database layer, hashed authentication, secrets management, least-privilege access, and server-side validation of all input. No internet service can promise perfect security; if we learn of a breach affecting your personal data, we will notify affected users and authorities as required by law.

8. International transfers

Our infrastructure is primarily located in the United States. If you access the service from outside the US, your information will be transferred to and processed in the US. Where required, we rely on appropriate safeguards such as standard contractual clauses through our subprocessors.

9. Children

PraiseSnap is a business tool and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact info@aipera.com and we will delete it.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be announced on this page with an updated date, and, for significant changes affecting account holders, by email. Continued use of the service after changes take effect constitutes acceptance.

11. Contact

Questions, requests, or concerns: info@aipera.com

Aipera Technology, 30 N Gould St, Ste N, Sheridan, WY 82801, USA

Email is the fastest route and the one we monitor; the postal address is provided so you can identify and reach the controller of your data by post if you prefer.