Privacy Policy

Last updated: February 17, 2026

1. Introduction

This Privacy Policy applies to GrabShot.dev and all services operated under the grabshot.dev domain (including subdomains such as pdf.grabshot.dev, metapeek.grabshot.dev, and others — collectively, the "Services"). By using any of our Services, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

When you register for an account, we collect your email address and a hashed password. We do not store plaintext passwords.

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other sensitive payment data on our servers. We receive and store your Stripe customer ID and subscription status to manage your plan.

Usage Data

We collect anonymized usage data including API call counts, timestamps, endpoint paths, and response status codes. This data is used to enforce rate limits, generate usage analytics for your dashboard, and improve our Services.

API Request Data

When you make API requests, we process the URLs and parameters you provide to deliver the requested output (e.g., screenshots, PDFs, metadata). We do not permanently store the content of your API responses unless you explicitly use a caching feature. Temporary processing data is deleted automatically.

Log Data

Our servers automatically collect standard log data including IP addresses, browser type, referring pages, and access timestamps. This data is retained for security and debugging purposes and is automatically purged after 30 days.

3. How We Use Your Information

  • To provide, maintain, and improve our Services
  • To process payments and manage subscriptions via Stripe
  • To enforce rate limits and usage quotas
  • To send important service-related communications (e.g., billing confirmations, security alerts)
  • To detect, prevent, and address fraud, abuse, or technical issues
  • To comply with legal obligations

We do not sell your personal information. We do not use your data for advertising.

4. Information Disclosure

We may share your information only in the following circumstances:

  • Payment Processing: Account and subscription data is shared with Stripe to process payments.
  • Legal Requirements: We may disclose information if required by law, regulation, or legal process.
  • Safety: To protect the rights, safety, or property of our users, ourselves, or the public.
  • Service Providers: We may use third-party providers (e.g., hosting, email delivery) who process data on our behalf under strict confidentiality agreements.

We do not share your data with third parties for their marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • All data transmitted between your device and our servers is encrypted via TLS/HTTPS
  • Passwords are hashed using bcrypt before storage
  • API keys are generated using cryptographically secure random methods
  • Database access is restricted and not exposed to the public internet
  • Regular security updates are applied to all server software

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Anonymized usage statistics may be retained indefinitely. Server logs are automatically purged after 30 days.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data in a portable format

To exercise any of these rights, contact us at [email protected].

8. Cookies

Our Services use local storage and session storage (not cookies) to maintain your login session and preferences. We do not use third-party tracking cookies or advertising pixels.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions about this Privacy Policy, contact us at:

[email protected]