Privacy Policy

Last updated: January 2025

Introduction

SnapTrace ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our EBS snapshot analysis service.

By using SnapTrace, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

  • Email address
  • Name (optional)
  • Company name (optional)
  • Password (stored securely using industry-standard hashing)

AWS Account Information

  • AWS Account ID
  • IAM Role ARN for cross-account access
  • External ID for secure role assumption

AWS Resource Metadata

We collect metadata about your EBS volumes and snapshots, including:

  • Volume IDs, sizes, and types
  • Snapshot IDs, sizes, and creation dates
  • Block-level change information (changed block counts)
  • Volume tags and names
Important: We never read or store the actual data contents of your EBS volumes or snapshots. We only access metadata and block change information.

Usage Data

  • Pages visited and features used
  • Time spent on pages
  • Browser type and version
  • IP address

How We Use Your Information

  • To provide and maintain our service
  • To analyze EBS snapshot churn and generate reports
  • To send you alerts and notifications you've configured
  • To respond to your inquiries and support requests
  • To improve our service and develop new features
  • To detect and prevent fraud or abuse

Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit using TLS 1.3
  • All data is encrypted at rest using AES-256
  • AWS credentials are never stored; we use IAM role assumption
  • Read-only access to your AWS resources
  • Regular security audits and penetration testing
  • Enterprise-grade security practices and controls

AWS Access Model

SnapTrace uses a cross-account IAM role model for accessing your AWS resources:

  • You create an IAM role in your account with read-only permissions
  • The role grants access only to EBS and EC2 describe APIs
  • We use external IDs to prevent confused deputy attacks
  • You can revoke access at any time by deleting the IAM role

Data Retention

We retain your data for as long as your account is active:

  • Account information: Until account deletion
  • Snapshot metadata: Rolling 90-day window by default
  • Churn metrics: Rolling 1-year window by default
  • Deleted account data: Permanently removed within 30 days

Third-Party Services

We use the following third-party services:

  • Stripe - Payment processing
  • AWS - Infrastructure hosting
  • Resend - Email notifications

Each third-party service has its own privacy policy governing their use of your data.

Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of your data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your account and data
  • Export: Download your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at [email protected].

Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies for advertising purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Significant changes will be communicated via email.

Contact Us

If you have questions about this Privacy Policy, please contact us: