Privacy Policy

1. Data controller

The data controller with respect to your personal data is SnapZoom LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA. Contact: hello@snapzoom.io. This policy has been prepared with regard to the EU General Data Protection Regulation (GDPR), Türkiye's Personal Data Protection Law No. 6698 (KVKK), and applicable U.S. state privacy laws.

2. What data do we collect?

• Account data: full name, email, phone number, password (stored as an irreversible hash).
• Application data: the name of the company to be formed, the founder's full name, country, contact details, and application notes.
• Identity verification data: identity documents such as a passport image, where required for the formation process (used solely to perform the service).
• Payment data: payments are processed by licensed payment institutions through the secure payment link we send you; your card number never reaches our servers. We receive only the transaction amount, date, and status.
• Technical data: IP address, browser type, pages visited, and cookies (see the Cookie Policy).
• Correspondence: support requests, email, and WhatsApp messages.

3. Purposes and legal bases of processing

4. Who do we share data with?

Your data is never sold. It is shared only to the extent necessary to perform the service, with the following parties:

• Government agencies: the Wyoming Secretary of State, the IRS, and other relevant authorities (for formation and compliance filings).
• Service providers: licensed payment institutions (payments), Resend (email delivery), Vercel (hosting), Upstash (database) — each under its own data processing agreement.
• Professional partners: accounting/tax partners upon your request, and only with your approval.
• Legal requirement: pursuant to a court order or a request from a competent authority.

5. International transfers

Our servers and service providers are located primarily in the United States. Transfers from the EU and Türkiye rely on appropriate safeguards such as your explicit consent, necessity for the performance of the contract, and/or Standard Contractual Clauses (SCCs).

6. Retention periods

• Account data: for as long as your account is active, and for a reasonable period after closure.
• Company formation records and invoices: for the minimum periods required by tax and commercial law (generally 5–10 years).
• Identity documents: only for as long as needed to complete the relevant transaction; securely deleted thereafter.
• Marketing permissions: until you withdraw your consent.

7. Your rights

Under GDPR Articles 15–22 and KVKK Article 11, you have the right to:

• Access your data and learn whether it is being processed,
• Request rectification, erasure, or restriction of processing,
• Object to processing and request data portability,
• Withdraw your consent at any time,
• Lodge a complaint with a supervisory authority (your local data protection authority in the EU; the KVKK Authority in Türkiye).

You can submit requests to hello@snapzoom.io; we respond within 30 days at the latest after verifying your identity.

8. Security

Your data is encrypted in transit using TLS. Passwords are stored using irreversible algorithms. Access is restricted to personnel who need it to perform their duties. We remind you that no system can be 100% secure and recommend using a strong, unique password for your account. In the event of a data breach, we act in accordance with our legal notification obligations.

9. Children

Our services are not directed at persons under 18, and we do not knowingly collect data from children.

10. Changes

Updates to this policy are announced on the site; for material changes, you will also be notified by email.