Privacy Policy
AutoSnag is software for property snagging surveyors: recording defects in new homes, producing survey reports and sending them to customers. This policy explains what personal data AutoSnag handles, why, and your rights. AutoSnag is a business operating in Ireland. Contact: privacy@autosnag.app.
Who is responsible for your data
- Account data (the people who use AutoSnag): AutoSnag is the data controller.
- Data a surveying company enters about its own customers and properties (names, addresses, email addresses, phone numbers, survey findings and photos): the surveying company is the controller, and AutoSnag processes it on the company's behalf and only on its instructions. If you are a homeowner and have a question about your survey, please contact the company that carried it out.
What we collect
- Account and company details: name, email address, company name, logo, phone and email, and each user's role.
- Survey data entered by users: property addresses, customer names and contact details, bookings, rooms, defects, notes, photos, measurements and the reports produced from them.
- Billing: subscription status and seat counts. Card details are handled by Stripe and never reach AutoSnag.
- Technical records: which user created or changed a record and when, the app version and device type, kept so the service works reliably and problems can be traced.
- Connected email account (if a user chooses to connect Gmail): see the next section.
Gmail and Google user data
A user may connect their own Gmail account so that AutoSnag can send survey reports to customers from that user's mailbox. When they do:
- AutoSnag asks Google for one permission to act on the mailbox: send email on your behalf (
gmail.send). It also receives the account's email address, to show which account is connected and to send from it. - AutoSnag cannot read, search, delete or change any email, cannot see your contacts, and never creates drafts. It sends only an email that the user has reviewed and chosen to send from within AutoSnag: a survey report to a recipient the user enters.
- We store the connected email address and an access token that Google issues. The token is encrypted and kept on our servers, where it cannot be read by the app or by other users. The content of each email sent is passed to Google to deliver and is not kept by AutoSnag; AutoSnag records only that the report was sent, when, by whom and to which address.
- Google user data is used only to send the emails the user asks AutoSnag to send. It is not used for advertising, not sold, not transferred to anyone except as needed to provide this feature, to comply with law, or as part of a merger or sale with the same protections, and not read by people at AutoSnag except with the user's permission, for security, or to comply with law.
- A user can disconnect at any time in Settings › Email Account, or from their Google Account's security settings. Disconnecting revokes AutoSnag's access and deletes the stored token and address.
AutoSnag's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Why we use data, and the legal basis
- To provide the service a company has subscribed to (contract).
- To bill for it and keep records the law requires (contract; legal obligation).
- To keep the service secure, working and improving, including de-identified statistics about how the defect library performs, which carry no names, addresses or company details (legitimate interests).
- To send reports from a connected mailbox, only when a user chooses to (the user's request; consent given in Google's permission screen).
Who we share it with
We do not sell personal data. We use these service providers, bound by data processing terms:
- Google Cloud / Firebase: hosting, database, file storage and sign-in. The database and our server functions are located in the European Union.
- Stripe: subscription payments.
- Google (Gmail): delivering emails a user sends from a connected Gmail account.
Voice dictation uses the speech recogniser built into the user's own device (Apple or Google), not an AutoSnag server.
How long we keep it
Account and company data are kept while the company uses AutoSnag. A company can export its data at any time from Settings › Company Data. Backups are overwritten on a rolling basis. A connected email token is deleted as soon as the user disconnects.
Deleting your account. You can delete your account at any time from Settings › Account › Delete Account in the app, or at autosnag.app/delete-account. This deletes your sign-in and your personal records (your profile, devices and connected mailbox). A company's survey records keep the name of the surveyor who made them, as the company's business records. An owner who deletes their account deletes the company and all of its data with it, and any subscription ends at once; records we must keep by law (such as invoices) are kept as the law requires.
Security
Data is encrypted in transit and at rest. The database and stored files are encrypted with encryption keys that AutoSnag manages itself in the European Union, rather than with the cloud provider's default keys. Each company's data is kept separate by access rules on our servers, and access within a company follows the roles its owner sets. Email access tokens are additionally encrypted with a key held separately from the database.
Your rights
Under the GDPR you may ask for access to, correction of, or deletion of your personal data, object to or restrict its use, and ask for a copy in a portable form. Contact privacy@autosnag.app. Where a surveying company is the controller of your data, we will pass your request to them. You may also complain to the Irish Data Protection Commission.
Changes
If this policy changes, the new version will be posted here with a new date, and significant changes will be notified to account owners.