1. Who we are
SnowDots is operated by SnowDots (“SnowDots”, “we”, “us”), with its operational headquarters at Nurani 6, Subidbazar, Sylhet 3100, Bangladesh. Registered address: [REGISTERED ADDRESS]. You can reach us about privacy at hello@snowdots.com.
We act in two roles. For this website, demo requests and SnowDots accounts, we are the controller of your personal data. For the reports and records an agency pushes to SnowDots, and for people who open an agency’s client portal, we are a processor and the agency is the controller. If you are a client of an agency, contact the agency first about data in its portal.
2. Data we collect
Demo requests and contact
Your name, work email, agency website, the number of clients you report to, and the source of the request. Demo requests are stored in our own CRM, a self-hosted copy of Twenty on servers in Europe. If you email us, we keep the message and your address.
Agency accounts and team members
For the agency, we hold its name, logo, client portal settings and billing contact. For each team member, we hold their name, email, job title, the access they have been granted, when they were invited, joined and last signed in, and how they want to be notified. We also keep a history of when access was given or removed.
Reports and the data behind them
SnowDots does not connect to Google, Meta, Shopify or any other marketing platform. Your team gets client data into its own AI tool, such as Claude or Codex, through connectors you set up there. We never see your platform logins or tokens.
What reaches us is what a team member pushes: the report, dashboard or insight, and its context record. We keep each version as it was pushed. The record holds the question asked, the queries run, the data they returned, assumptions and findings. That data usually consists of marketing metrics and account or campaign names. It can include personal data if the agency’s AI tool pulled it. We store what we are sent and do not check it against the platform.
Client contacts, shared links and comments
An agency adds the contacts at each client: name, email, and optionally phone, job title, organisation, their role on the account and how they want to hear about new reports. We record the access each contact holds, when they were invited and joined, when they open the portal, and any comment they leave. Team members also leave comments on reports.
If a team member shares a report with someone by email, we record that address and when the link was opened. If an agency turns on a public link for a report, anyone who has the link can open it without signing in.
Website analytics and technical logs
With your consent where the law requires it, we use Google Tag Manager and Google Analytics 4 to count visits. We also keep technical and security logs such as IP address and browser type. See the cookie policy.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Handle demo requests and contact you about them | Consent, and our legitimate interest in running the business |
| Provide the service to an agency and its team, including invites and the notifications people choose | Performance of a contract |
| Store reports and context records, and host reports for the agency’s clients | As processor, on the agency’s instructions |
| Keep the service secure and prevent abuse | Legitimate interest |
| Measure how the website is used | Consent where required, otherwise legitimate interest |
| Meet legal obligations | Legal obligation |
4. How data moves between SnowDots and AI tools
SnowDots is built around the AI tool an agency already uses. Each team member connects that tool to SnowDots through their own MCP connector, limited to the clients where the agency has given them Contribute access or higher. An agency admin can revoke a connector at any time. Data moves in two directions, always at the team member’s direction:
- Push: the team member sends a report and its context record from their AI tool to SnowDots. It arrives as a draft only the team can see.
- Pull: a teammate who can open that report loads it into their own AI tool to carry on from it, with its comments and the client’s brief if they choose.
SnowDots does not control how an AI provider handles data it receives. The provider’s own terms and privacy policy apply, and the agency chooses which provider to use.
5. We do not train AI models on your data
SnowDots does not use reports, records or the data in them to train generalised AI models, and does not allow others to.
6. Data from marketing platforms
Because your own AI tool brings platform data in, the platforms’ terms about storing, sharing and combining their data bind the agency, as set out in our terms. Native connections to platforms are coming soon. Before SnowDots connects to any platform itself, we will update this policy, including the statements each platform requires, and tell account holders.
7. What we do not do
- We do not sell personal data or the data in reports.
- We do not use report data for advertising, or for credit or lending decisions.
- We do not let people read reports or records, except with the agency’s consent, to investigate abuse or a security issue, to comply with law, or in aggregated and anonymised form for internal operations.
8. Who we share data with
- Subprocessors that help us run the service, listed on our subprocessors page.
- The people an agency shares reports with: client contacts in its portal, people it sends a link to by email, and anyone who has a public link the agency turned on.
- Authorities, where the law requires it.
- A successor, if SnowDots is part of a merger or sale. We would tell you first.
9. How long we keep data
| Data | Kept for |
|---|---|
| Demo request details | Until you ask us to remove them, or until we have finished arranging your demo and following up |
| Agency account data | While the account is active, then deleted as set out in data deletion |
| Reports, context records and comments | While the agency works with the client. When the agency ends a client, the policy it chose for that client applies: kept read only, handed over as an export, or deleted after 90 days. Also deleted on the agency’s request or when the account closes |
| Disabled team members and removed contact access | Can be restored for 30 days. Account details are deleted on request or when the account closes, as set out in data deletion |
| Security logs | Only as long as needed to keep the service secure and to meet legal duties |
The agency decides what goes into a record and can ask us to delete it at any time. Data you keep in your own AI tool is outside SnowDots and is not deleted when you delete it here.
10. Security
We describe what protects your data on our security page. We do not claim any security certification.
11. International transfers
We operate from Bangladesh, so our team may access data from there. Our subprocessors may also process data outside your country. Where personal data leaves the UK or the European Economic Area, we rely on an approved transfer mechanism such as standard contractual clauses. Ask us and we will tell you which mechanism applies to each subprocessor.
12. Your rights
Depending on where you live, you can ask us to give you access to your data, correct it, delete it, restrict or stop how we use it, or give you a portable copy. You can withdraw consent at any time, and complain to your data protection authority. Email hello@snowdots.com and we will reply within 30 days. If your data is in an agency’s portal, we will pass your request to the agency.
13. Cookies
We use a small number of cookies and similar technologies. See the cookie policy.
14. Children
SnowDots is a business service. It is not directed at anyone under 18 and we do not knowingly collect their data.
15. Changes
We will post changes on this page and update the date at the top. If a change affects how we use the data in reports, including any move to connect to platforms ourselves, we will tell account holders in advance and, where required, ask for consent.
16. Contact
Privacy questions and requests: hello@snowdots.com.