Privacy Policy

Socialligator LLC, a Wyoming limited liability company, EIN 36-5141839. Contact: support@screenshotor.com. Postal address: Sheridan, Wyoming, USA. We do not publish a street address.

Data we store

• Account data: email address, password hash, email verification time, terms acceptance time, and session records.
• API data: a hash of your API key, the URLs you ask us to capture, capture settings, status, and error text.
• Images: screenshot files, and, if you turn on AI vision, the text result and the model name.
• Billing data: plan, credit usage, and Creem customer and subscription ids. We do not store card numbers.
• Technical data: IP address used for rate limits, and standard server logs.

Why we process it

We process this data to provide the API, keep accounts secure, measure monthly credits, send verification and password-reset email, and meet accounting duties. The legal bases are contract (the service you asked for), legitimate interests (security and abuse prevention), and legal obligation (tax and accounting records held by the merchant of record).

Processors

• Creem, merchant of record for paid checkout, tax, and subscription management.
• Emailit, for transactional email.
• Hetzner, for hosting the application. Servers are in Germany and Finland.
• api.market, for temporary hosting of screenshot image files.
• OpenRouter, when you enable AI vision, to send the captured image for a text description.

Retention

Account data stays until you delete the account or ask us to delete it. Screenshot URLs and images follow the storage driver in use. Temporary image URLs from api.market expire after about 48 hours. Usage rows are kept for the life of the account so monthly credits stay accurate. Server logs are kept for a short operational period. Creem keeps payment records under its own policy.

Your rights

You can ask to access, correct, export, or delete your personal data, and you can object to processing based on legitimate interests. Email support@screenshotor.com. You can also complain to a data protection authority. If you are in the EEA or the UK, you may complain to the authority where you live.

International transfers

Hosting is in the European Union (Hetzner, Germany and Finland). Other processors, including Creem, Emailit, api.market, and OpenRouter, may process data in the United States or other countries. Where a transfer leaves the EEA or the UK, it is covered by the provider's standard contractual clauses or an equivalent safeguard.

Cookies

The site sets an httpOnly session cookie after you sign in. It is used to keep you logged in. We do not use it for advertising. See the Terms of Service for the rules of the service.