Privacy Policy

Last updated: October 2026

SnapPilot ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data is collected, how it is used, and your rights.

What data the Chrome extension stores locally

The SnapPilot Chrome extension stores capture and editing data on your device using browser storage such as IndexedDB and Chrome extension storage. This can include:

  • Screenshots and recordings you capture
  • Local recording metadata such as names, captured subtitle/transcript segments, and edited recording state saved to Gallery
  • Browser flows you record (steps, screenshots, notes)
  • Your SnapPilot authentication state when you sign in
  • Recording preferences such as selected source, camera layout, subtitle settings, and teleprompter configuration
  • Structured webpage data you explicitly choose to extract with Extract Data. SnapPilot reads rendered tables, grids, links, and repeating page items only after you start extraction, may scroll the selected page surface to load additional rows, and prepares the resulting CSV or XLSX locally in the extension.

We do not upload your local screenshots, recordings, flow contents, or Extract Data results to our servers unless you explicitly use a separate sharing or cloud feature.

Chrome Web Store Limited Use. SnapPilot’s use of information obtained through Chrome extension APIs and webpage access is limited to the user-facing features described in the extension and its Chrome Web Store listing, and is handled in accordance with the Chrome Web Store User Data Policy, including the Limited Use requirements.

What data we store on our servers

When you create a SnapPilot account, subscribe, or use a cloud sharing feature, we may store:

  • Your email address, name, country, verification state, and account identifiers
  • A hashed password — we never store plain text passwords
  • Subscription plan, billing cycle, status, trial state, and subscription period dates
  • Active flow count and license-check information used to enforce plan access
  • Recording-share metadata such as title, duration, expiry, owner, status, and plan-limit usage
  • Recording media that you explicitly upload for sharing, stored in server-side chunks so it can be streamed to people with the share link
  • Transcript/highlight data that you choose to attach to a shared recording
  • Shared-recording viewing activity, including a pseudonymous viewer identifier for guest views and account identity for signed-in viewers where applicable
  • For recordings owned by Pro or Business accounts, the viewer IP address for each visit may be recorded for per-video analytics. IP addresses are encrypted at rest; a one-way keyed hash is used to aggregate unique IP addresses and visit counts. SnapPilot may derive an approximate city/region/country from that IP locally on the SnapPilot server for owner analytics; the IP is not sent to a third-party IP lookup service for this enrichment. The full IP analytics view is available only to the authenticated recording owner.
  • Comments, replies, reactions, and related in-app notification records created through shared-recording collaboration features

Payment data

We do not store your credit card, bank, or UPI details. All payment processing is handled by:

  • Razorpay for Indian customers — subject to Razorpay's Privacy Policy
  • PayPal for international customers — subject to PayPal's Privacy Policy

We receive webhook notifications from these providers to confirm subscription status, but do not receive or store raw card data.

Cookies and sessions

We use a single HTTP-only cookie to maintain your login session on the website. We do not use tracking cookies or third-party advertising cookies.

On-device processing

Several SnapPilot features are designed to run locally in the browser or extension environment. OCR uses Tesseract.js locally. SnapPilot Auto Subtitle reuse and optional local speech transcription are processed on-device in the extension. Supported camera background separation also runs on-device. These local processing features do not require sending the relevant image, audio, or camera frames to an external AI transcription/background-processing provider.

Shared recording access

A recording is uploaded only when the owner explicitly creates a recording share. Anyone who has a valid, unexpired share link can access the shared recording unless it is revoked or expires. Guest viewers may be counted anonymously. Signed-in viewers can be identified to support activity, comments, reactions, replies, and notifications. For Pro and Business recording owners, SnapPilot may also record the viewer's IP address so the owner can see unique IP addresses, approximate location derived locally from that IP, and visit counts for that specific recording in their dashboard. Opening your own recording as its owner is excluded from external view counting and viewer-IP analytics.

Third-party services

Payment processing is handled by the providers listed above. If you choose Sign up with Google or Log in with Google, Google authenticates your Google Account and returns basic account information needed to create or access your SnapPilot account, such as a stable Google account identifier, email address, verification status, and profile name. SnapPilot does not receive your Google password and does not request access to Gmail, Drive, Calendar, contacts, or other Google data.

SnapPilot may also retrieve maintained public domain lists to help block known disposable email services during signup. We do not use those lists to send signup content or passwords to the list provider.

Data retention

Local captures remain on your device until you delete them or browser storage is cleared. Recording shares remain available until their configured expiry or until the owner revokes them, after which the service may remove or clean up associated media according to operational retention processes. You can request deletion of your account by contacting contact@mashtrixx.com; we will process account-data deletion requests within 30 days, subject to records we are legally required to retain.

We do not sell your data

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Contact

For privacy questions: contact@mashtrixx.com