Privacy policy
Last updated
SnagOwl is a snagging and inspection app operated by Otonomi Technologies and Consulting FZCO ("Otonomi", "we", "us"). This policy explains what we collect when you use the SnagOwl apps (web, iPhone and, later, Android) and this website, why we collect it, and what you can do about it. The short version: we use your data to run SnagOwl for you. We don't advertise, we don't track you across other apps or websites, and we don't sell data.
Who is responsible for your data?
Otonomi Technologies and Consulting FZCO (IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates) operates SnagOwl and is responsible for the data described here. Contact us at support@snagowl.com with any question about privacy.
Most of what goes into SnagOwl belongs to an organization: a snagging firm, a developer or a contractor that uses SnagOwl for its projects. For that content (projects, snags, photos, reports), the organization decides what is collected and who can see it, and we process it on its behalf. If you were invited to SnagOwl by an organization, you can also ask that organization about your data.
What do we collect?
Account details. Your email address, your name, a user ID, your password (stored only as a secure hash by our authentication provider) and your sign-in sessions.
Organization data. The organization’s name, logo, colours and terminology, its members and their roles, contractor companies, projects, zones, units, floor plans, templates and checklists.
Inspection content. Snags and their descriptions, locations, floor-plan pins, severities and statuses; photos and the markup you draw on them; comments; checklist answers; re-inspection verdicts; reports and the Excel registers created from them. This can include other people’s details that you type in, such as a contractor’s name, email or phone number.
Voice notes. When you record a voice note to create a snag, the audio is sent for transcription and the text becomes part of the snag. The audio itself is not kept.
Signatures. When someone signs a report, we store the signature, the signer’s name and the time.
Share links. When you share a report by link, we store the link. When someone signs a shared report, the signed acknowledgement records the signer’s name, the time, a one-way hash of their network address and their browser’s user-agent string. These are kept with the acknowledgement as evidence of who signed and when, and are deleted with the report or when you ask us. We don’t store the network address itself. Opening a share link is also rate-limited with a hashed form of the address, which is cleared within a few hours.
Purchase records. Your plan, seats, report credits and payment status. Card payments on the web are handled by Stripe and in-app purchases by Apple or Google through RevenueCat; we never see or store your full card number.
Website contact form. Your name, work email, company, phone (if you give it), what you do, the number of inspectors and your message. We use them only to reply to you. They are emailed to support@snagowl.com, which forwards to the Otonomi Technologies team mailbox; the email also includes your approximate country, which Cloudflare derives from your network address. Your details are not added to any mailing list. Your network address is used to rate-limit the form and appears in short-lived operational logs kept by Cloudflare.
Technical data. Our hosting providers keep standard request and server logs (such as the time of a request, network address, browser details and error messages) for security and to fix problems, for the provider’s log retention period. The website uses Cloudflare Web Analytics, which counts page views without cookies and without identifying you.
Why do we use it?
- To provide SnagOwl: to let you capture snags, work offline and sync, share reports and collect signatures.
- To send the emails the service needs, such as sign-in links, invitations and notifications about snags assigned to you.
- To bill for plans and keep purchase records.
- To keep SnagOwl secure, prevent abuse and fix problems.
- To reply when you contact us.
We don’t use your data for advertising, we don’t build marketing profiles, and we don’t sell or rent it to anyone.
On what basis do we use it?
| Purpose | Basis |
|---|---|
| Running SnagOwl for you and your organization, including emails the service needs | Our contract with you or your organization |
| Processing organization content (projects, snags, photos, reports) | On the organization’s instructions, as its processor |
| Security, abuse prevention and fixing problems | Our legitimate interest in keeping SnagOwl safe and working |
| Billing, tax and purchase records | Our contract with you and our legal obligations |
| AI suggestions | Your organization’s choice to turn them on, as part of the service it uses |
| Replying to contact-form messages | Your request to be contacted |
Do you use AI on my content?
Only if your organization turns it on. AI suggestions are off by default; an owner or admin can switch them on in the console. When they are on, the text you type or dictate, and a smaller copy of the snag’s photo, are sent to an AI model to suggest a category, severity and contractor, to check for possible duplicates, to transcribe voice notes and to check a report before it is issued. These requests run on Cloudflare Workers AI, with TypeSafe as a fallback for text only. We store what was suggested and whether you kept it; the inputs themselves are stored only as a one-way fingerprint so we can spot duplicates. We don’t use your content to train AI models.
Who processes data for us?
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage for photos and reports, server functions | EU (Frankfurt, Germany) |
| Cloudflare | Hosting for the apps and this website, PDF rendering, Workers AI for suggestions and transcription, email sending and forwarding | Cloudflare’s global network |
| Otonomi’s email provider | Email hosting for our support mailbox | As described by the provider |
| TypeSafe | Fallback AI for text suggestions, when AI is turned on | As described by TypeSafe |
| Stripe | Card payments and invoices for web purchases | As described by Stripe |
| RevenueCat | Managing in-app purchases | As described by RevenueCat |
| Apple and Google | App distribution and in-app payments | As described by Apple and Google |
Each provider processes data only to provide its service to us. Data stored by SnagOwl (the database and files) is kept in the EU. Some processing, such as rendering a PDF, sending an email or answering an AI request, happens on Cloudflare’s network, which may be outside the EU.
Is my data transferred outside the UAE?
Yes. We are based in the UAE, and the database and files are stored in the EU (Frankfurt, Germany). Some processing happens on the networks of the providers listed above, in other countries. We transfer data only to these providers, only to provide SnagOwl, and we take the steps that applicable data protection law requires for these transfers. Business customers who need contractual terms for transfers can ask for our data processing addendum.
Who can see my content?
Inside SnagOwl, access follows your organization’s settings: members see the projects they have access to, contractors see only the snags assigned to their company, and viewers see what is shared with them. Photos and reports are private and can be opened only by signed-in members with access or through share links that you create. Anyone with a share link can open that report, so share links only with people who should see it.
We access customer content only when it is needed to run or support the service, for example when you ask us for help, or when the law requires it.
Cookies and local storage
This website does not set cookies. The SnagOwl app stores your sign-in session and your offline work on your device so it can work without signal; this is needed for the app to function and is not used for tracking.
How long do we keep data?
We keep account and organization data while the account or organization is active.
- Deleted organizations: a deleted organization stops being accessible straight away. For 30 days we can restore it if the owner asks; after that we delete it permanently, except for copies in our backups, which expire on a rolling schedule.
- Records we must keep: purchase and tax records are kept for as long as the law requires.
- Contact-form messages: deleted from our support inbox within 12 months, unless they become part of a customer relationship.
- Server logs: kept for a short period by our hosting providers.
How do I delete my account or my data?
- Workspaces and organizations: an owner can delete the organization from the management console. Unsynced work on a device can be deleted from the device at the same time.
- Your user account: email support@snagowl.com from the address you sign in with and ask us to delete your account. We will confirm when it is done.
- Your rights: you can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. We reply within 30 days. Depending on where you live you may have further rights under data protection law. If your data is organization content, we may pass your request to that organization, which decides on it. If you are not satisfied with our answer you can complain to your local data protection authority.
How do you protect my data?
Data is encrypted in transit and stored with providers that encrypt it at rest. Access inside SnagOwl follows your organization’s roles. Photos and reports are private files, opened only through short-lived signed links. Our staff access to customer content is limited to what is needed to run and support the service.
If a security incident affects your personal data, we will tell the affected organization, and you and the relevant authority where the law requires, without undue delay.
Children
SnagOwl is a business tool and is not intended for children.
Changes to this policy
If we change this policy we will update the date at the top of this page, and tell account owners by email about significant changes before they take effect.
Contact
Otonomi Technologies and Consulting FZCO, operator of SnagOwl, IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates. Email support@snagowl.com.