Privacy policy

1. Who is responsible

SnapCues is run by Nodexco (Business ID 2452077-2), Finland, which is the controller of your personal data. Contact: info@nodexco.com. The same operator runs Postwalls; SnapCues and Postwalls share one sign-in for the same email address.

2. What we collect and why

• Email address, to sign you in and send you sign-in links and codes. Basis: our contract with you.
• Your shows: cue lists, titles, notes, announcements, display settings, background images, the live view password and public link settings, to save and show them. A show with a public link also has a copy of its live view for the people watching. When you use a phone remote, a copy of the open cue list is kept for the remote link. Basis: contract.
• Files you upload to read: photos, PDF, Word and text files are sent to Anthropic's Claude model, which reads the schedule. We do not keep the file; the cues read from it are saved as a show. Anthropic may keep what it receives for a limited time under its own terms before deleting it. Basis: contract.
• Purchases: Stripe handles your card and billing details. We keep a record of each purchase (pack, price, status and Stripe reference) and of the AI pages you use. Basis: contract and our duty to keep accounts.
• AI usage: the pages each reading used and the size of the model's answer, to run the free quota and keep costs in check. We also keep a small record of your monthly allowance (your account id and counters), so that deleting your data does not reset the free allowance. Basis: our legitimate interest.
• Public link viewers: a random id for each browser tab and when it last checked in, to count viewers. Nothing else about viewers is kept, and these ids are removed within a day.
• Abuse protection: we count requests per email address, IP address and account. They are stored only as keyed one-way hashes (made with a secret key kept on our server) and removed within a day. Our hosting providers also keep technical logs.
• Error reports: when the app fails, a report without your name, email address or what you entered is sent to Sentry, so we can fix the fault. Basis: our legitimate interest.

3. Service providers

These companies process data for us under data processing agreements:

• Clerk: sign-in and sign-in emails (USA)
• Supabase: database and file storage (EU)
• Vercel: hosting; the app runs in Frankfurt, Germany
• Anthropic: reading uploaded schedules (USA)
• Stripe: payments, tax and receipts
• Sentry: error reports (Germany)
• Cloudflare: a bot check (Turnstile) on the sign-in page, loaded through Clerk

Where data goes outside the EU/EEA, the transfer relies on safeguards the GDPR requires, such as the EU standard contractual clauses or the EU–US Data Privacy Framework.

4. How long we keep data

• Shows: until you delete them or delete your SnapCues data.
• Purchase records: as long as Finnish accounting law requires. Unpaid checkout attempts are removed after 30 days.
• AI usage records and AI call records: 24 months. Your monthly allowance record stays while the account exists.
• Phone remote copies: up to 7 days after the last change.
• Public link viewer ids and abuse protection counters: up to one day.
• The sign-in account: deleting your SnapCues data removes SnapCues sign-in. The email also sits in a login that Postwalls shares. When you delete your data we note that you asked, and we remove that login within 30 days unless a Postwalls account still uses it. A Postwalls account can be deleted at Postwalls.

5. Your rights

You can ask to see, correct or delete your data, restrict or object to its use, and get your data in a portable form. You can download your SnapCues data as a file from the start page (“Download my data”), and delete it yourself at Delete SnapCues data; for anything else, email info@nodexco.com. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

6. Cookies and browser storage

SnapCues uses only the cookies sign-in needs (from Clerk and Supabase) and your browser's storage for the show you have open, so the live display works on the same computer. There are no advertising or analytics cookies. Signing out removes the show from the browser.

7. Changes

We update this page when our handling of data changes. The date at the top shows when.