Privacy Policy

1. Who is responsible for your information

Saascraft Ventures Pte Ltd is responsible for ChartSnap AI and acts as the controller where that term applies. Our registered address is 6 Raffles Boulevard, Marina Square, #03-308, Singapore 039594.

For privacy enquiries or to reach the person responsible for data protection, email support@chartsnap.ai with “Privacy” in the subject line. You may also write to the address above.

2. Information we process

Account and authentication information

When you sign in, we process your account identifier, email address or Apple private-relay address, authentication information and session records. You do not need to give us your Apple password. Account identifiers can connect your account with subscription status and permitted usage events.

Chart images and analysis

We process images you choose to photograph or upload, chart information needed for the request, and generated results such as annotations and structured analysis. When you select an instrument, we process the requested symbol and timeframe to provide its chart and analysis.

Images may reveal names, balances, positions, account identifiers or other personal information. Remove that information before upload. If you submit unrelated personal content by mistake, it may still be received and processed before the service identifies the problem. Chart images are not assumed to be anonymous.

Subscriptions and purchases

Apple processes App Store payments. We and our subscription provider process purchase and subscription records, product identifiers, transaction references, entitlement status, renewal, cancellation and refund information to provide and restore access. We do not receive your full payment-card details from Apple.

Device, usage and technical information

We process installation, session and account identifiers; device and operating-system information; app version; network information such as IP address; operational errors; and usage events. Acquisition information may include campaign links and the source of an installation or purchase. These identifiers are pseudonymous, not necessarily anonymous, and may be associated with your account.

Support information

We process your email address, correspondence and information you choose to provide when you ask for help. Do not send passwords, verification codes, sign-in links, full payment details or unredacted financial screenshots.

3. Why we use information

• Authenticate users, provide chart analysis, and save or retrieve results where the feature is available.
• Administer the free analysis, verify subscriptions and restore paid access.
• Maintain reliability, investigate errors, prevent abuse and protect accounts.
• Understand product usage and measure acquisition and purchase performance, subject to applicable consent requirements.
• Answer support and privacy requests and comply with legal obligations.

Providing information needed for a requested feature is necessary for that feature to work. Declining optional analytics or marketing consent does not by itself remove paid access.

4. AI processing of chart content

We use OpenAI to generate chart analyses. The submitted chart and the context needed to interpret it are sent to OpenAI through our backend, and the resulting analysis is returned for display in ChartSnap AI. Any personal information left visible in an image may be included in that transmission. Remove unnecessary personal or confidential information before uploading.

OpenAI states that API inputs and outputs are not used to train its models by default, unless the API customer opts in to data sharing. This default is not a guarantee of zero storage. Its standard abuse-monitoring logs may retain content for up to 30 days, or longer where legally required. Some API features retain application data separately, potentially until deletion. Retention depends on the features and approved controls used.

Processing may occur outside your country, including in the United States, depending on the service configuration. We do not promise Singapore-only processing or zero data retention. See OpenAI’s API data controls for its published practices.

Before transmitting personal data to a third-party AI service, we explain the sharing and obtain the permission required for that processing. Accepting general terms is not a substitute for that permission. If you decline, the AI analysis feature cannot process the chart through that provider.

5. Service providers and other recipients

We use the following providers to operate the app, website and support service:

• Apple: Sign in with Apple and App Store payments, subscriptions and refunds.
• Supabase: account authentication and backend account and service records.
• RevenueCat: subscription verification, entitlements, lifecycle records and purchase integrations.
• PostHog: permitted product-usage and subscription-performance events.
• AppsFlyer: acquisition attribution and permitted purchase-performance measurement.
• Vercel: hosting and delivery of the ChartSnap website, including operational request information.
• AgentMail: receiving and processing messages sent to our support email address.
• OpenAI: processing submitted chart images and analysis context to generate results, as described in section 4.

We may also disclose information to professional advisers, to authorities when lawfully required, to protect legal rights or safety, or in a business transfer subject to appropriate safeguards. Providers processing information on our behalf are subject to appropriate contractual and confidentiality requirements. Services such as Apple may also process information independently under their own terms and privacy notices.

6. Analytics, attribution and cookies

We limit analytics to selected operational, usage, campaign and purchase events. We exclude chart images, image text, tickers, price levels, positions, balances, prompts, AI outputs and trading verdicts from PostHog and AppsFlyer. We also exclude names, email addresses and phone numbers from those services. Internal account and service identifiers can still link permitted events.

PostHog session replay and automatic event capture are disabled, as is advertising-identifier collection for AppsFlyer. Permitted operational and attribution data may still be associated with your account; these settings do not make all SDK processing anonymous or remove applicable consent requirements.

Our website and app may use essential local storage or similar technologies for functionality and security. We enable optional analytics or marketing technologies only after obtaining any legally required consent. Where consent applies, you may withdraw it through the available consent controls or by contacting us. Withdrawing consent does not affect earlier lawful processing. Browser controls can also limit cookies, but may affect functionality.

Marketing emails, if offered, require the permission applicable in your country and include a way to unsubscribe. Essential account, purchase and service messages are separate from promotional emails.

7. Legal grounds

Where the EU or UK GDPR applies, we rely on performance of our contract to provide requested accounts, analyses and subscription access; legitimate interests in proportionate security, fraud prevention and service reliability; legal obligations for required records and disclosures; and consent for processing that requires it, including optional analytics or marketing where applicable.

Where Singapore or another jurisdiction requires consent, notification or another lawful basis, we apply the relevant requirements. You can withdraw consent by contacting us; we will explain any effect on a service that depends on that processing. If we need information to comply with law or provide a requested feature and you do not provide it, we may be unable to provide that feature.

8. Storage and retention

Information may be stored on your device and in systems used by us and our providers. We retain personal information only for as long as needed for its stated purpose or a lawful retention requirement. We do not promise that every image is deleted immediately after inference or that all copies are removed at the same time.

• Account and saved results: retention is based on providing account access and the history you keep, deletion requests and any necessary legal or security exceptions.
• Uploaded charts and processing records: retention is based on completing and securing the request, resolving processing failures, any saving feature you choose, and the AI provider treatment disclosed in section 4.
• Purchase records: retention is based on subscription administration, accounting, disputes and applicable legal duties. Apple may retain its own records independently.
• Support and diagnostic records: retention is based on resolving enquiries, investigating incidents and meeting legal obligations.
• Backups: information awaiting expiry from protected backups may remain after removal from active systems; our backup retention and restoration controls respect deletion requests and applicable law.

These criteria do not authorize indefinite retention. We delete or effectively anonymize information no longer needed for these purposes. Contact us for information about retention relevant to your request.

9. International processing

We are based in Singapore. Information may be processed in other countries by the providers needed to deliver the service. Those countries may have different data-protection laws from your country.

Where required, we support international transfers with applicable safeguards, such as recognized adequacy arrangements or appropriate contractual protections. For EEA or UK data, we use a transfer mechanism that satisfies the relevant GDPR requirements. Contact us to request information about the safeguards relevant to your data. OpenAI processing is described in section 4.

10. Your rights and choices

Depending on your location and the processing involved, you may request access to or a copy of your information, correction, deletion, restriction, portability, or withdrawal of consent. You may object to processing based on legitimate interests and to direct marketing. Rights are subject to applicable conditions and lawful exceptions.

Email support@chartsnap.ai to make a request. We may ask for proportionate information to verify your identity. Where applicable, an authorized representative may act for you. We will respond within the time required by the law that applies to your request.

You can use available in-app deletion controls or contact us about deleting an analysis or account. Account deletion does not cancel an Apple subscription; manage that separately in Apple Account settings. Some records may need to be retained for legal or security reasons as described above.

You may complain to your local data-protection authority, including Singapore’s Personal Data Protection Commission, the UK Information Commissioner’s Office, an EEA authority such as Ireland’s Data Protection Commission, or the relevant privacy authority in Canada, Australia or New Zealand. Contacting us first is welcome but does not remove that right.

Where US state privacy laws apply, you may also have rights concerning correction, deletion, access, appeals and opting out of specified sale, sharing or targeted-advertising processing. These rights depend on the law applicable to you and the processing involved. Contact us to exercise an applicable right or appeal our response. We will not unlawfully discriminate against you for exercising your privacy rights.

11. Security

We use technical and organizational measures appropriate to the information and risks involved. No service can guarantee absolute security. Protect your device and account, avoid including unnecessary personal information in chart images, and notify support if you suspect an incident.

12. Age restriction

ChartSnap AI is intended for adults aged 18 and over, not children. If you believe someone under 18 has provided personal information, contact us so we can investigate and take appropriate action, including deletion where required.

13. Changes and contact

We will update the policy date when our practices change and provide additional notice or seek fresh consent where required. A revised notice will not retrospectively authorize incompatible processing.

Saascraft Ventures Pte Ltd
6 Raffles Boulevard, Marina Square
#03-308, Singapore 039594
Email: support@chartsnap.ai

See also our Terms of Use and Support page.