Last updated: March 6, 2026

This Privacy Policy explains how Snapbrick, Inc. (“Snapbrick,” “we,” “us,” or “our”) collects, uses, and shares information when you use our websites and services.

If you do not agree with this Privacy Policy, please do not use our services.

1. Who We Are & Scope

This Privacy Policy applies to:

• Our websites and landing pages (the “Sites”); and

• Our software products and services, including our managed package and related AI features (the “Services”).

For most of the Customer Data we process through Salesforce, your organization is the data controller and Snapbrick is the processor / service provider.

2. Information We Collect

We collect three main categories of information:

2.1 Information You Provide Directly

Examples include:

• Account and contact information

  • Name, job title, company name

  • Business email address

• Support and communication

  • Information you send to us via email, support tickets, or demos

  • Feedback and survey responses

If you contact us directly (e.g., at team@snapbrick.ai), we will receive any information you choose to provide.

2.2 Information From Salesforce and Other Integrated Systems

Snapbrick is a Salesforce managed package. When your organization installs and authorizes our package, we may access certain Salesforce information, depending on the permissions granted.

This can include:

• Salesforce user and org information

  • User email address and identifier (via Salesforce login)

  • Organization / instance ID and configuration details

• CRM records and related data (“Customer Data”). Depending on how you configure Snapbrick and user permissions, this may include, for example:

  • Account, Contact, Opportunity, Lead, and Case records and fields

  • Activities, tasks, notes, and related objects

  • Metadata such as field names, layouts, and relationships

We use Customer Data only to provide the Services as configured by your organization (e.g., generate summaries, draft emails, classify cases, etc.).

2.3 Information Collected Automatically

When you use the Sites or Services, we may automatically collect:

• Usage and log information

  • Pages or features used

  • Date/time of access

  • Browser type, device type, operating system

  • IP address and general location (at a city/region level)

• Cookies and similar technologies: We use cookies and similar tools on our Sites and, where applicable, in our Services. For more details, see our Cookie Policy.
  

3. How We Use Information

We use the information we collect for purposes such as:

• Providing the Services

  • Authenticate users via Salesforce login

  • Access and process Customer Data as configured by your organization

  • Generate AI-powered outputs (summaries, suggestions, classifications, etc.)

• Operating, maintaining, and improving the Services

  • Monitor performance and reliability

  • Debug, support, and protect against errors or misuse

  • Develop new features and enhancements

• Communicating with you

  • Respond to support requests and inquiries

  • Send administrative messages (e.g., notices about changes to terms, security updates)

  • Send onboarding and product education content

• Marketing (B2B context)

  • Send information about updates, features, or events

  • You may opt out of marketing emails at any time via the unsubscribe link.

• Legal, compliance, and security

  • Detect, prevent, and investigate fraud, abuse, or security incidents

  • Enforce agreements and policies

  • Comply with applicable laws and legal processes
    

4. AI Processing and Third-Party Model Providers

Our Services use AI features to process Customer Data and generate outputs.

• We may send raw Salesforce data and other Customer Data to third-party AI model providers only to the extent necessary to generate the outputs you request (for example, summarizing an Account or drafting an email based on a Case).

• We require our providers, via contract, to act as service providers / processors and to use Customer Data only to provide their services to us.

• AI-generated output may not always be accurate, complete, or appropriate for every use case. Your organization is responsible for reviewing and validating outputs before relying on them.

You can control what data is available to Snapbrick and downstream providers via prompt configuration and permissions.

5. Legal Bases (EEA/UK Visitors)

If you are located in the EEA or UK, we rely on the following legal bases to process personal data:

• Contract: To provide the Services under our agreement with you or your organization.

• Legitimate interests: To operate, improve, and secure our Services, and to communicate with you in a B2B context.

• Consent: For certain cookies or marketing communications, where required.

• Legal obligations: To comply with applicable laws and regulations.
  

6. How We Share Information

We may share information in the following situations:

• Service providers and subprocessors. We use third parties to help operate the Sites and Services, such as hosting providers, AI model vendors, analytics, support tools, and payment processors. They may process personal information on our behalf and are contractually obligated to protect it.

• Within your organization. Certain account, configuration, and usage information may be visible to your organization’s administrators and other authorized users.

• Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, information may be transferred as part of that transaction.

• Legal and safety requirements. We may disclose information if required by law, lawful request, or to protect the rights, property, or safety of Snapbrick, our users, or others.

We do not sell personal information.

7. Data Retention

By default, we retain information for as long as necessary to:

• Provide and operate the Services;

• Comply with legal, accounting, or reporting requirements; and

• Resolve disputes and enforce agreements.

Your organization may control certain retention and deletion settings in Salesforce or via our configuration. We may retain aggregated or de-identified data that no longer identifies you or your organization.

8. Security

We use reasonable technical and organizational measures to help protect information, including:

• Access controls and authentication

• Encryption in transit and at rest where appropriate

• Logging and monitoring

• Backups and resilience practices

However, no method of transmission or storage is completely secure and we cannot guarantee absolute security.

9. International Transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards (such as contractual protections) to help protect personal data when it is transferred internationally.

10. Your Rights

Depending on your location, you may have rights such as:

• Access to your personal information

• Correction of inaccurate information

• Deletion of certain information

• Restriction or objection to certain processing

• Portability of certain information

Where we act as a processor for your organization, we will direct you to your organization (the controller) for requests that relate to Customer Data.

You can exercise your rights or contact us about privacy by emailing: team@snapbrick.ai

11. Children’s Privacy

Our Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above and may provide additional notice where appropriate.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Snapbrick, Inc.

Email: team@snapbrick.ai