Privacy Policy

1. Introduction

SnowForge LLC ("we," "us," or "our") operates SnowPipe, a data pipeline management platform for e-commerce businesses, accessible at pipe.snowforge.dev. This Privacy Policy describes how we collect, use, and protect your information when you use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and profile information through our authentication provider, Clerk. We do not store passwords directly — authentication is handled entirely by Clerk.

2.2 Pipeline Data

When you connect your e-commerce store (Shopify, WooCommerce, BigCommerce, or others), SnowPipe processes your product data, inventory levels, and other information you configure for syncing. This data is processed in transit and stored temporarily in encrypted form on AWS S3 to facilitate pipeline operations.

2.3 Connection Credentials

API keys, OAuth tokens, and other credentials you provide to connect your stores and destinations are encrypted at rest using AES-256 encryption and stored in our database. We never log or expose these credentials.

2.4 Usage Data

We collect anonymous usage analytics through Vercel Analytics, including page views and web performance metrics. We also collect error reports through Sentry to diagnose and fix issues. These services may collect:

• Browser type and version
• Pages visited and features used
• Error stack traces (no personal data)
• Performance metrics (page load times, API latency)

2.5 Billing Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other financial information on our servers. Stripe's privacy policy governs the handling of your payment data.

2.6 Merchant Customer Data

When you connect an e-commerce store, we may receive limited personal data about your customers— for example, the email address on an order — so we can sync that order to your downstream systems and surface it in your SnowPipe dashboard. We treat this data as belonging to you (you are the data controller); we are a processor acting on your instructions. We do not sell it, share it with third parties outside the sub-processors listed below, or use it for our own marketing.

We retain order data for one year from the order date, after which it is automatically deleted by our daily retention job. You can request earlier deletion at any time by emailing support@snowforge.dev or by uninstalling the SnowPipe app from your store, which triggers full deletion of your shop's data within 30 days (per Shopify's mandatory shop/redact webhook).

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the SnowPipe platform
• Process your data pipelines and sync your product feeds
• Send transactional emails (job alerts, account notifications) via AWS SES
• Provide AI-powered product categorization via Anthropic's API
• Monitor service health and diagnose errors
• Respond to support requests
• Comply with legal obligations

We do not sell your data. Your pipeline data belongs to you. We process it solely to provide the service you have requested.

4. Third-Party Services

SnowPipe integrates with the following third-party services to provide its functionality:

Each of these services has its own privacy policy governing how they handle data. We recommend reviewing their policies for details.

5. Data Storage and Security

Your data is stored and processed in the United States:

• Application hosted on Vercel (Cleveland, Ohio region)
• Data processing on AWS (us-east-2, Ohio)
• Database hosted on Neon (PostgreSQL)

We implement industry-standard security measures including:

• AES-256 encryption for stored credentials
• TLS/HTTPS for all data in transit
• Server-side encryption for S3 storage (SSE-S3)
• Automatic expiration of temporary pipeline data
• Role-based access control with organization isolation

6. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Order data (Order + OrderItem): Retained for 1 year from the order date, then automatically deleted by our daily retention job.
• Pipeline snapshot files: Temporary snapshots on S3 are automatically expired via lifecycle rules (30 days max).
• Job logs: 6 months for terminal jobs (completed, failed, cancelled).
• Webhook + audit logs: 30 days (webhook), 1 year (audit).
• Usage analytics: 12 months in anonymized form.
• Billing records: 7 years as required by law.
• On Shopify app uninstall: All merchant + customer data deleted within 30 days (per Shopify's shop/redact mandatory webhook).

7. Cookies and Tracking

SnowPipe uses essential cookies for authentication sessions (managed by Clerk) and basic analytics (Vercel Analytics). We do not use third-party advertising cookies or cross-site tracking.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of analytics tracking

To exercise these rights, contact us at support@snowforge.dev.

9. Children's Privacy

SnowPipe is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email. Your continued use of SnowPipe after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

SnowForge LLC
Email: support@snowforge.dev