Privacy

Two different groups. Account holders are people who sign up to collect testimonials. Submitters are their customers, who fill in a collection form without creating an account. The two are treated differently because they have given us very different amounts of information.

An email address and a display name, used to sign you in and to email you when a testimonial arrives. Your projects, forms, testimonials and widget settings. If you subscribe, Stripe customer and subscription identifiers — we never see or store your card details, which stay with Stripe.

Only what the form asks for: the testimonial text, a name, and optionally a role, a company, a star rating, a photo and a source link. A submitter is never asked to create an account, and no tracking cookie is set on a collection form.

Consent is explicit and unbundled. A testimonial cannot be published unless the submitter ticked the consent box, and the timestamp of that consent is stored alongside it. The database enforces this — a testimonial physically cannot be marked approved without it.

Nothing about your visitors. The widget sends no cookie, sets no identifier, and does no fingerprinting. It makes one anonymous request for the approved testimonials of a published widget, and that request carries no credentials — which is also why it can be cached, and why a traffic spike costs nothing.

Supabase hosts the database, authentication and file storage. Stripe processes payments. Resend sends transactional email. The application runs on our own server. Each receives only what it needs to do its job.

Email support@praisesnap.com and we will export your account data or delete it. We would rather tell you this plainly than put a self-service delete button in the interface before it has been built and tested properly.

If you submitted a testimonial to a business and want it removed, contact that business — they control what is published. If you cannot reach them, contact us and we will help.

If this policy changes in a way that affects how your data is handled, account holders will be emailed before it takes effect.