Last updated: 28 September 2026
This policy explains which personal data Progresso ICT (Mooieweg 106, 6836 AJ Arnhem, the Netherlands, KvK 61820423) processes as a controller when you visit https://snapdex.dev, create an account or pay for Snapdex. For personal data inside the catalogues and search photos our customers send us, we are a processor; the data processing agreement covers that.
Questions and requests: [email protected].
What we process, why and on what basis
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Name, email address, password (hashed), two-factor and passkey details | Your account and signing in | Performance of the contract | Until you delete your account |
| Team names, memberships, roles and invitations | Working together in teams | Performance of the contract | Until the team or account is deleted |
| Billing name, address, VAT number, payment status, invoices | Charging for paid plans | Performance of the contract; legal obligation | Invoices and records: 7 years (Dutch fiscal law) |
| Usage counts per API key and day | Quotas, overage billing, usage overviews | Performance of the contract | 25 months, or until the team is deleted |
| Activity log of changes in the portal and through the API | Showing you who did what | Performance of the contract | 12 months, or until the team is deleted |
| IP address and browser details of a session | Keeping you signed in, security | Legitimate interest (security) | Until the session ends |
| Server and error logs, including IP addresses | Security, fixing errors | Legitimate interest (security, reliability) | At most 30 days |
| Emails you send us | Answering your questions | Legitimate interest | As long as needed to handle the question |
We do not sell personal data and do not use it for advertising. We do not make decisions about you based solely on automated processing.
Search photos on the website
The live demo on the home page sends the photo you choose to our search service to find matching products. The photo is not stored.
Cookies
Snapdex uses only functional cookies, which need no consent:
- a session cookie and an
XSRF-TOKENcookie, to keep you signed in and protect forms; appearance, to remember light or dark mode;sidebar_state, to remember whether the portal sidebar is open.
We use no analytics, tracking or advertising cookies.
Who receives data
We use a small number of service providers (subprocessors) for hosting, payments and email. They are listed on the subprocessors page. All our servers and storage are in the European Union. Stripe processes payment details as an independent controller under its own privacy policy.
Security
Data is encrypted in transit, passwords are stored hashed, API keys are stored only as a hash, and access to production systems is limited to people who need it.
Your rights
You can ask us for access to, correction or deletion of your personal data, restriction of its processing, or a copy in a portable format, and you can object to processing based on our legitimate interest. Most of this you can do yourself in the portal; otherwise email [email protected]. We answer within one month.
If you are not satisfied with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We may update this policy. The date at the top shows the latest version; material changes are announced by email.