Privacy Policy

1. Information We Collect

We collect only what is necessary to provide the service:

• Account information: your email address and profile, provided via Auth0 when you log in.
• Device identifier: a stable, randomly generated UUID stored locally on your device. Used to associate your session with your subscription.
• Your content: the data you create (such as your Snipzilla snippets) is stored locally on your device. Cloud sync is enabled automatically for Trial, Premium, and Enterprise plans and stores an encrypted copy on our servers.
• Subscription and billing data: handled entirely by Stripe. We store only your subscription plan and status; we never see or store your payment card details.
• Usage data: AI Assist request counts, used to enforce your monthly usage quota. Feature usage statistics are stored locally on your device only and are never transmitted to our servers.
• Feedback data: when you submit feedback through the app, we also collect your app version, operating system, and subscription plan to help us reproduce and prioritize issues.
• Store order information: when you place an order in our store, we collect your name, email address, and shipping address. These details are shared with our payment processor and our manufacturing partner solely to process payment, fulfil, and ship your order.
• Store order phone number: when you place a store order, you may optionally provide a phone number. If provided, it is passed directly to our manufacturing partner to enable carrier delivery notifications. ZillaSoft does not store your phone number.
• Marketplace app data (Snipzilla Templates for Jira, Zendesk, and Freshdesk): our helpdesk marketplace apps store the reply templates your team creates, together with the host-platform user IDs needed to record template owners, personal libraries, and activity log entries. This data is held inside your own Jira, Zendesk, or Freshdesk environment and is never transmitted to ZillaSoft. When you apply a template, the app reads the relevant issue or ticket fields to fill it in and writes the resulting reply, all using your own permissions on that platform. The same principle applies to any marketplace app we release in the future: its data lives in the host platform, not with us.
• Browser extension data (Snipzilla for Chrome, Edge, and Firefox): the extension stores your snippet library and settings in your browser's extension storage. On the free tier this data never leaves your browser. On plans with cloud sync, your snippets are end-to-end encrypted on your device before upload, exactly like the desktop app. The extension reads the page you are typing in only to detect a shortcut you type and to insert your snippet there; only the name of a matched shortcut leaves the page, and the clipboard is read only at the moment a snippet you expand uses the clipboard placeholder.

2. How We Use Your Information

• To provide, maintain, and improve our products
• To verify your subscription status and enforce plan limits
• To sync your data across devices (Trial, Premium, and Enterprise only)
• To send service and product communication, including onboarding messages, renewal reminders, receipts, subscription changes, and account notices. No marketing emails without your explicit consent
• To respond to support requests you send us
• In the event of a merger, acquisition, or asset sale, your data may be transferred to the new owner. You will be notified in advance of any such transfer and of any changes to how your data is handled

We only process your data when we have a clear, legitimate reason to. Here is what that looks like in practice:

• Account and billing data: we need this to deliver the service you signed up for. Without it, we cannot create your account or process your subscription.
• Usage data: we use AI Assist request counts solely to enforce your plan's monthly quota. This is strictly necessary to deliver the service and cannot be opted out of while your subscription is active.
• Marketing and newsletter emails: only with your explicit opt-in. You can unsubscribe at any time, no questions asked.

3. Cookies and Local Storage

We use only essential, functional browser storage. We do not use advertising, marketing, or cross-site tracking cookies. The only analytics we use is privacy-friendly and cookieless (Cloudflare Web Analytics, described under Third-Party Services), which sets no cookies on your device. The items below are stored in your browser to make the site work; most never leave your device.

• Theme preference: your light/dark choice, stored in localStorage (key: "theme"). Stays in your browser and is never sent to our servers.
• Sign-in state: when you sign in, we store a small record of your session in localStorage (key: "zs_user") so the site can show you as signed in and display your dashboard link.
• Authentication tokens: sign-in is handled by Auth0, which stores authentication tokens in your browser's localStorage so you stay signed in between visits. These are removed when you sign out.
• Shopping cart: items you add in the store are saved in localStorage (keys: "zs_store_cart" and "zs_pending_cart") so your cart persists while you browse and through checkout. Stays in your browser.
• Referral source: if you arrive via a link with UTM parameters (for example, from an ad or a partner site), those values are saved in localStorage (keys: "utm" and "zs_ref"). Used only to understand which channels bring visitors to the site. Never sold or shared. Clear it any time by clearing your browser's local storage.
• Plan and seat selection: a cookie named "zs_plan" is set when you click a pricing plan, storing your selected plan and billing cycle (for example, "premium_annual") so checkout can pre-select your choice. Expires in 30 days. The seat counts you choose on the pricing page are also kept in localStorage (keys: "zs_premium_seats", "zs_standard_seats", "zs_enterprise_seats"). No personal data is stored in any of these.
• Language preference: a cookie named "zs_locale" is set to remember your preferred display language (for example, "fr" or "de"). It is derived from your browser's language settings on first visit, or updated when you use the language switcher. Expires in 30 days. No personal data is stored in this cookie. This cookie is strictly necessary for the site to display content in your chosen language and does not require your consent under applicable privacy laws.
• Other functional state: we use a few short-lived localStorage values to make navigation smooth, such as remembering your scroll position ("zs_scroll_y"), completing the sign-in redirect ("auth_redirect_pending"), and showing the welcome screen once after sign-up ("wlc_from_dashboard", "wlc_session_id"). These contain no personal data and stay in your browser.

4. Data Storage and Security

Data you sync to our servers is protected with end-to-end encryption. Your synced data (your snippets in Snipzilla, whether from the desktop app or the browser extension, and your pinned clips and collections in Stashzilla) is encrypted on your device with AES-256-GCM before it ever leaves it, using a key derived from your personal recovery code. The server stores only the encrypted payload and has no access to your key or the plaintext content. Your data is isolated from all other users at the database level. All sync traffic is additionally secured in transit by HTTPS. Data is stored on infrastructure hosted in Europe.

Authentication is handled by Auth0 using industry-standard PKCE flows. We do not store passwords.

Snipzilla Templates marketplace apps (Jira, Zendesk, and Freshdesk): each of these apps stores all of its data inside the host platform's own storage (Atlassian's Forge storage, Zendesk custom objects, Freshdesk app storage), on that platform's infrastructure. The apps make no outbound network calls to ZillaSoft or any third party (zero egress), so we never receive, see, or store your templates, your issue or ticket content, or your platform user IDs. Personal template libraries are readable only by the agent who created them where the host platform enforces access rules, and template content is never read for analytics; the usage metrics shown to administrators are numeric counts only. The Jira app additionally runs a weekly personal-data reporting cycle through Atlassian's official API: when an Atlassian account is deactivated or removed, the data associated with it is erased automatically.

A note for users in the EU and EEA: our API server (Railway) and database (Neon) are hosted in Europe. Authentication is handled by Auth0 on their European tenant. Your core account and data stays within Europe. The only exception is our AI features, which send text to Anthropic's API in the United States for processing: in Snipzilla, the snippet description you type for AI Assist; in Stashzilla, the text of a clip you choose to tag when semantic tagging is enabled, and the full text of a clip you run an AI paste transform on. If your Enterprise administrator has configured your organization's own AI provider, that text goes to the provider they chose, in whatever country that provider operates, rather than to Anthropic. No account data or billing information is involved. Our nightly database backup is uploaded to AWS S3 in Frankfurt, so it stays within Europe. That transfer is covered by Standard Contractual Clauses (SCCs). Where any of our other providers (including Anthropic, AWS, Auth0, Stripe, Brevo, Cloudflare, and Sentry) process data in the United States, the transfer rests on Standard Contractual Clauses in that provider's data processing terms or on their EU-US Data Privacy Framework certification, whichever applies.

5. Third-Party Services

We use the following third-party services to operate ZillaSoft products. Each one only receives the data it needs to do its job:

• Auth0: authentication and identity management. Your login credentials are processed and stored by Auth0. You can also sign in with Google, GitHub, LinkedIn, or Microsoft. If you use one of those, that provider handles the sign-in, learns that you signed in to ZillaSoft, and returns your email address and basic profile to Auth0.
• Stripe: payment processing. Billing information is handled directly by Stripe under their privacy policy. We never see your card details.
• Manufacturing partner: our store merchandise is produced and shipped by a third-party fulfilment provider. When you place a store order, we send them your name, email address, shipping address, the items you ordered, and, if you provided them, your phone number and gift message, solely to produce and ship your order. They receive nothing about your ZillaSoft account or subscription.
• Anthropic: powers our AI features (Trial, Premium and Enterprise), processed in the United States. In Snipzilla's AI Assist, only the description text you type for snippet generation is sent; your stored snippets are never transmitted. In Stashzilla, semantic auto-tagging is optional and off unless you turn it on; when enabled, the text of the clip being tagged is sent so Anthropic can return descriptive labels. Stashzilla also offers AI paste transforms (summarize, translate, and fix grammar); when you run one, the full text of that clip is sent to Anthropic so it can return the transformed version. No account data and no billing information is ever sent to Anthropic, and your inputs are not used to train Anthropic's models per their standard API usage policies. Anything you put into the text you send goes with it, so treat these features the way you would treat any external service.
• Enterprise AI provider (customer-supplied key): an Enterprise administrator can configure their organization's own API key and endpoint for AI features. Where that is configured, the AI requests for that organization, including the prompt text and the snippet or clip content described above, are sent to the provider the administrator chose instead of to Anthropic, under that provider's own terms and in whatever country that provider operates. This is off unless an administrator sets it up, and ZillaSoft does not choose or control that provider.
• Brevo: email delivery. We use Brevo to send transactional emails (such as contact form confirmations and subscription receipts) and to manage newsletter subscriptions when you opt in. All registered users are also added to a service notifications list used exclusively for material policy changes and critical service announcements. This list is separate from the newsletter and does not require opt-in, as it serves our legitimate interest in fulfilling the notice obligations described in our Terms. Brevo receives more than your email address in two cases: store order confirmation emails contain your shipping address in the body of the message, and if you rate a store order, your star rating, your comment, and the date are saved on your Brevo contact record. Brevo processes this data for these purposes only.
• Amazon Web Services (AWS): our website is hosted on AWS (S3 + CloudFront), and the backend functions behind our contact form, support requests, dashboard billing, and store all run on AWS Lambda. AWS also holds a copy of our production database: an automated job runs every night, dumps the database in full, and uploads it to an AWS S3 bucket in Frankfurt (eu-central-1). That backup contains everything the database holds, including account records, subscription records, feedback you have submitted, and the encrypted payloads of any content you sync. AWS may log standard web access data such as IP addresses as part of normal infrastructure operations.
• Cloudflare: provides our DNS, content delivery and proxy, bot protection (Turnstile, used on the contact form, the newsletter form, the store notify form, and store checkout), and privacy-friendly Web Analytics. Cloudflare Web Analytics is cookieless and collects only aggregate visit metrics such as page views and referrers; it sets no cookies, does not fingerprint you, and is never used for advertising. Cloudflare may process IP addresses to deliver these services.
• Railway: our API server is hosted on Railway. Like any hosting provider, Railway may log IP addresses and request metadata as part of normal infrastructure operations.
• Neon: our database is hosted on Neon (PostgreSQL). Your account, subscription, and synced data (encrypted) are stored there.
• Atlassian (Jira): when you submit a support request through our contact form, your name, email, and message are stored in our Jira instance to manage the support ticket. If you attach a file to the form, it is uploaded to the same Jira ticket. That includes images (such as screenshots) and JSON preset exports, so whatever those files contain is stored in Jira too.
• Marketplace platforms (Atlassian, Zendesk, and Freshworks): our Snipzilla Templates apps run on the host platform's own app infrastructure and store their data inside your account there. If you install one, that data stays within your own environment, and purchasing, billing, and licensing are handled by the platform through its marketplace. ZillaSoft receives no template, issue, or ticket data from these apps.
• App stores: our desktop apps are also distributed through the Microsoft Store, and the Snipzilla browser extension through the Chrome Web Store, Microsoft Edge Add-ons, and Firefox Add-ons. When you install from a store, the store's operator processes your install and licensing data as an independent controller under its own privacy policy; ZillaSoft receives only aggregate install statistics.
• Donations (Ko-fi and PayPal): donations are made directly on Ko-fi or PayPal under their own privacy policies. ZillaSoft receives the donation amount and whatever name or message the platform passes along, and nothing else; donations are not linked to your ZillaSoft account.
• Sentry: we use Sentry for error and performance monitoring in both our desktop apps and our website. In our desktop apps, when crash reporting is enabled (the default), reports containing the error type, stack trace, app version, and subscription plan are sent to Sentry if an unexpected crash occurs. Each report is also tagged with your device identifier (the randomly generated UUID described in section 1) as the Sentry user id, so we can tell repeated crashes on one device apart from a problem affecting many people; your name and email address are not attached. Local variable values and UI interaction history are stripped from every report before it leaves your device, so no user content is ever included, and you can disable crash reporting at any time via the crash reports toggle in the app's settings (the change takes effect on next launch). On our website, Sentry captures anonymous diagnostics such as JavaScript errors and page-load performance to help us detect and fix issues; no account content is included. Sentry data is processed in Sentry's EU region.
• Fonts: the Inter and Poppins typefaces used on this site are both self-hosted. No third-party font service is used, and no data is sent to external font providers when you visit our site.

Each of these services has its own privacy policy. We encourage you to review them.

6. Data Retention

We retain your account and subscription data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your data within 30 days, except where retention is required by law (e.g., billing records).

Other categories are retained as follows: support requests submitted through our contact form are kept in our ticketing system for as long as needed to resolve your request and for a reasonable reference period afterward; newsletter subscriptions are kept until you unsubscribe; store order records are retained as long as needed for fulfilment, accounting, and tax obligations; and standard infrastructure and analytics access logs (such as IP addresses) are retained by our hosting and analytics providers according to their own default retention periods.

7. Your Rights

You are in control of your data. You have the right to:

• Access: ask us what personal data we hold about you and receive a copy of it.
• Correction: ask us to fix any data about you that is wrong or incomplete.
• Deletion: ask us to delete your account and all associated data. We will do so within 30 days, except where the law requires us to keep certain records. Please note that account deletion will immediately cancel any active subscription, and you may not be eligible for a refund of any remaining subscription period.
• Data portability: export your data at any time from within the app in a standard format. You can also request a copy of any other personal data we hold about you.
• Object to processing: if we rely on a legitimate business interest to process your data (such as fraud prevention or security monitoring), you can ask us to stop. We will stop unless we have a compelling reason to continue, and we will always explain our reasoning. Note that this right does not apply to processing that is strictly necessary to deliver the service you subscribed to, such as billing and account management.
• Restrict processing: ask us to pause processing your data (for example, while you are disputing its accuracy). During that time we will store it but not use it.
• Withdraw consent: if you gave us consent for something (such as a newsletter), you can take it back at any time. Just unsubscribe or contact us. Withdrawing consent does not affect anything that happened before you withdrew it.

To exercise any of these rights, use our privacy request form or email us at privacy@zillasoft.io. We will respond within 30 days.

EU and UK users: if you feel we have not handled your data correctly and we have not resolved your concern, you have the right to lodge a complaint with your local data protection authority (for example, the ICO in the UK, CNIL in France, or the relevant authority in your country). We would always prefer you reach out to us first so we can try to make it right.

8. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. US State Privacy Rights (CCPA/CPRA and similar)

Several US states have enacted consumer privacy laws that give you additional rights on top of everything listed above. These include California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and others. The following rights apply to residents of these states to the extent required by applicable law:

• The right to know exactly what personal information we collect about you and why
• The right to request deletion of your personal information
• The right not to be treated differently for exercising any of these rights

We do not sell your personal data and have no plans to do so. To exercise any of these rights, use our contact form or email us at privacy@zillasoft.io.

10. Changes to This Policy

We may update this policy from time to time. Continued use of our services after the effective date of any change constitutes your acceptance of the updated policy.

11. Contact Us

Questions about this policy, or want to exercise your data rights? Reach us at: