Privacy Policy

Last updated: 14 October 2026

1. Who we are

Snapdragon Accounts (snapdragonaccounts.com) is operated by SnapDragon Enterprises LLC, a Wyoming limited liability company. Contact: sales@snapdragonaccounts.com.

2. What we collect

Account data: your email address, name (optional), and a hashed password when you register. Transaction data you import: the contents of YEMPay CSV files you upload (transaction dates, amounts, counterparties, descriptions) and the reports we generate from them. Subscription data: plan, status, and payment records such as order identifiers and amounts. Technical data: minimal server logs required to operate the service.

3. What we do NOT collect

We never see or store your card details. Payments are processed by Polar.sh, our merchant of record — card data goes directly to Polar, and Polar's own privacy policy applies at checkout. We do not collect data from YEMPay directly; all transaction data arrives because you choose to import it.

4. Why we process it

To provide the Service you signed up for (accounts, imports, reports, exports), to manage billing and your subscription, to secure and maintain the Service, and to comply with legal obligations.

5. Processors we use

Polar.sh — billing (merchant of record). Supabase (Postgres hosting) and Vercel (application hosting) — infrastructure that stores and serves your data on our behalf. Data is hosted in the EU region (database) with global CDN delivery.

6. Cookies

We use a single essential session cookie so you can stay logged in. We do not use advertising or third-party tracking cookies.

7. Retention and deletion

We keep your data while your account is active. You can export everything at any time (CSV/PDF). If you ask us to delete your account, we delete your account information and imported transaction data, except where we must keep records (for example invoices) for tax or legal reasons.

8. Your rights

You can request access to, correction of, export of, or deletion of your personal data by emailing us at the address above. If you are in the EU/EEA or UK, you have statutory rights under the GDPR (access, rectification, erasure, restriction, portability, objection) and may complain to your local supervisory authority.

9. Security

Passwords are stored only as bcrypt hashes. Access to production data is restricted, databases are locked down (row-level security with no public API access), and connections are encrypted in transit.

10. Changes

We may update this Policy and will change the date above. Material changes will be announced in the Service or by email where appropriate.