Privacy Policy
Last updated 1 July 2026
This policy explains what Snowlax collects, why, how we use and share it, and the control you have over your information.
Snowlax (“Snowlax”, “we”, “us”) is operated by Snowlax Network (Business Registration No. 202603010825 (003811863-X)). This Privacy Policy applies to the Snowlax website at https://snowlax.com, the web and installable (PWA) application at https://app.snowlax.com, and our mobile apps (together, the “Service”). By using the Service, you agree to this policy.
The short version
- We collect the account details you give us, the business and financial information you put into Snowlax, and basic usage data needed to run the Service.
- We use your information to provide the Service, including processing your requests with AI, and to keep your account secure.
- We do not sell your personal information, and we do not use the content of your books to advertise to you.
- You can access, correct, or delete your data at any time. See Delete your data.
Information we collect
Information you provide
- Account information: your name, email address, phone number, workspace and business name, and authentication details. If you sign in with Google or another provider, we receive basic profile information from them.
- Business and financial content: the information you enter or upload to keep your books, such as invoices, expenses, receipts, transactions, client and contact details, documents, and the messages you send to the assistant.
- Files and media: images and documents you attach (for example, photos of receipts), including via your device camera or photo library when you grant permission.
- Payment information: if you subscribe to a paid plan, payments are processed by our payment provider. We receive limited billing details (such as plan, amount, and the last digits of a card) but do not store full card numbers.
- Support and communications: messages you send us.
Information collected automatically
- Device and log data: IP address, device and browser type, operating system, app version, and timestamps.
- Usage data: features used and actions taken, to operate, secure, and improve the Service.
- Cookies and local storage: used to keep you signed in, remember preferences, and power analytics and product research. See Cookies and local storage.
- Analytics and session replay: we use PostHog and Google Analytics 4 to understand how our website and app are used. This includes automatically captured interactions (such as pages viewed, clicks, and other events), device and approximate location derived from your IP address, and session recordings of your activity on our marketing website. PostHog sets a cross-subdomain identifier so that a visit you make to https://snowlax.com can be linked to your activity once you sign in to https://app.snowlax.com. See Cookies and local storage for how to opt out.
Information from third parties
- Sign-in providers (such as Google) share basic profile information when you choose to sign in with them.
- Connected services you choose to link (such as messaging via WhatsApp) share information needed to provide that connection.
Is providing your information required?
Providing your core account information (such as your name and email) is obligatory: we cannot create your account or provide the Service without it. The business and financial content you add, and optional device permissions (such as camera or photo access), are voluntary, but the related features will not work unless you provide them — for example, we cannot draft an invoice without the invoice details, or scan a receipt without camera access. If you choose not to supply required information, we may be unable to create your account, provide the Service, or carry out the task you asked for.
You can limit how we process your information by providing only optional data you are comfortable sharing, editing or deleting content in the Service, opting out of analytics and session recording (see Cookies and local storage), declining optional device permissions, and contacting us at support@snowlax.com to exercise your rights.
How we use your information
- Provide, maintain, and improve the Service.
- Carry out the tasks you ask the assistant to do, such as creating invoice PDFs, recording expenses, reviewing ledger entries, and answering questions about your data.
- Process payments and manage subscriptions.
- Communicate with you about the Service, including security and account notices.
- Keep the Service secure, detect and prevent fraud and abuse, and debug issues.
- Comply with legal obligations and enforce our terms.
AI processing of your content
Snowlax is an AI assistant. To do what you ask, we process the content of your requests and the relevant parts of your data using artificial intelligence, including models operated by trusted third-party model providers acting on our behalf. These providers process your content only to return a result to you and under contractual confidentiality and security obligations. We do not permit your content to be used to train third-party models for unrelated purposes.
How we share information
We share information only as described here:
- Service providers (sub-processors) who process data on our behalf to run the Service, including: cloud hosting and storage, authentication, AI model providers, payment processing, messaging, e-signature, analytics, and customer support. They may only use the data to provide services to us.
- At your direction, for example, sending an invoice to a client you specify.
- Legal and safety, when required by law, or to protect the rights, safety, and security of users, the public, or Snowlax.
- Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this policy.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Google user data
If you sign in with Google or connect a Google service, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you request, do not transfer it except as needed to provide those features or as required by law, and do not use it for advertising.
Data retention
We keep your information for as long as your account is active and as needed to provide the Service. After you delete your account, we delete or de-identify your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, accounting, or security obligations, or to resolve disputes. See Delete your data.
Your rights and choices
Depending on where you live, you may have the right to access, correct, restrict, or delete your personal information, to obtain a copy of it, and to object to certain processing. You can:
- Access and edit most information directly in the Service.
- Delete your data or close your account, as described in Delete your data.
- Contact us at support@snowlax.com to exercise any right, including requesting a copy of your data. We will not discriminate against you for doing so.
Security
We use technical and organisational measures designed to protect your information, including encryption in transit, access controls, and isolation of each workspace’s data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your account credentials confidential and tell us promptly of any suspected unauthorised access.
International data transfers
We and our service providers may process and store your information in countries other than your own, which may have different data protection laws. Where required, we put appropriate safeguards in place for such transfers.
Children’s privacy
The Service is not directed to children, and is intended for users 16 years and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Cookies and local storage
We use cookies and similar technologies (including browser local storage) for two kinds of purpose:
- Strictly necessary: to sign you in, keep the Service secure, and remember your preferences. The Service may not work without these.
- Analytics and product research: PostHog and Google Analytics 4 set cookies and local-storage identifiers to measure how the Service is used, capture interactions automatically, record sessions on our marketing website, and stitch your pre-sign-in visits to your account across the https://snowlax.com and https://app.snowlax.com subdomains. These are not necessary to use the Service.
We do not use cookies for third-party advertising. You can opt out of analytics and session recording by blocking these cookies through your browser settings or a tracker-blocking extension, or by contacting us at support@snowlax.com. Blocking strictly necessary cookies may stop some features from working.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you in the Service. Your continued use after an update means you accept the revised policy.
Contact us
Questions about this policy or your data? Contact Snowlax Network (Business Registration No. 202603010825 (003811863-X)) at support@snowlax.com, or by post at 1A-05-03, Desa Baiduri, Jalan Ru 1, 11500 Ayer Itam, Pulau Pinang, Malaysia.