Privacy policy

The data controller is Domenico Garruzzo (Snello), Quai Charles-Page 45, 1205 Genève, Svizzera. For any request about your data you can write to support@snelloapp.com.

1. You write to us from this site's form (you're a professional, a studio, a shop…). The data you leave us is only used to get back to you, and we are the data controller.

2. You use Snello for your business (you have an account or a subscription). We are the data controller for your account and billing data. We process: your name, email and password (stored in a form that nobody, not even us, can read back); the name, type and address of your business; your currency; your VAT number and billing address, if you pay in euros or pounds or use the 90-day offer; your subscription status and invoices. Your card details are held by Stripe: we never see them. If you connect your Google account to create video-call rooms, we also process that account's email address and an access permission, stored encrypted, that lets us create, move and delete events only in a separate “Snello” calendar: we don't read or change the rest of your calendar, your email or your files. You can disconnect it whenever you like from the app, and the permission is also withdrawn at Google. Snello's use of information received from Google APIs, and its transfer to any other app, adhere to the Google API Services User Data Policy, including the Limited Use requirements: we use it only to create and update those rooms, we don't sell it, we don't use it for advertising or to train artificial intelligence models, and nobody reads it except for the security of the service or where the law requires.

3. You're the customer of a business that uses Snello to take bookings. In that case the data controller is the business, not us: we process that data on its behalf, as a technical provider. To exercise your rights, contact the business where you booked. If you choose to get reminders on WhatsApp, Telegram or as phone notifications, your number or identifier also passes through the service you chose. If the appointment is online, the video-call link you receive by email is written by the business or, if the business has connected its Google account, created by Google Meet specifically for that appointment: in that case Google receives the date, the time, a neutral title and your name (never your email, your phone number or the name of the service) and sends you no invitations. The call takes place on the service the business has chosen (Zoom, Meet or other), not on Snello, and is governed by that service's privacy policy.

4. You left your name, email or phone number in a form inside a Facebook or Instagram ad. That data comes to us from Meta. We handle it, just like the data from this site's form: we get back to you by email to tell you about Snello and prepare your page, at most three messages. No newsletter, and you can tell us to stop whenever you want. If you don't become a customer, we delete your contact within 12 months.

• First and last name, business name, email address — required so we can reply to you.
• Phone, city, plan you're interested in and the free-text message — optional.
• The IP address of the request, used only to limit automated submissions and not stored with the rest.

Without your consent we load no measurement or advertising tools from other companies. If you agree, we use Google Analytics and the Meta pixel, as explained in “Visit statistics and advertising”. The PeerPush badge at the bottom of the pages is an image loaded from their site: to show it, your browser sends your IP address to PeerPush.

To reply to your request (pre-contractual steps taken at your request); if you become a customer, to provide the service and invoice it (contract and accounting obligations); for visit statistics and ad measurement, only with your consent; and to prevent abuse of our offers — the free trial applies once per email address and the 90-day offer once per VAT number — on the basis of our legitimate interest. We don't sign you up to any newsletter and we don't send you marketing you haven't asked for.

Requests from the form that don't turn into a contract are deleted within 12 months. If you are a customer and close your business from the app, the business's data (schedule, services, customers, account) is deleted 30 days after the end of the period already paid for (7 days if the business is invoiced manually); an internal backup copy, which nobody uses, is kept for at most a further 30 days and then erased. If you only cancel from the billing portal without closing the business, payments stop and the data stays for 12 months after the subscription ends, so you can come back; then it is deleted. To delete it sooner, close the business or write to us. Kept for longer only: accounting records and the email address used for the purchase, 10 years by law; and, if you used the 90-day offer, your VAT number, which we keep for 10 years to apply the “once per VAT number” rule and then delete.

The server's technical logs (IP address, requested page, time) are kept by our hosting provider for 1 hour, for security and to fix errors.

Without asking you, we only use the cookies and browser storage needed to make the pages work: the session of people signing in to the workspace, the language, the light or dark theme, your cookie choice and, on the booking page, the details a customer chooses to remember on that device.

If you consent, we use Google Analytics 4 to know how many people visit the site and the workspace, where they come from and which sections they look at. On the site pages we also use the Meta pixel, to know whether people who come from one of our ads on Facebook or Instagram then visit the pages or sign up. Meta may also use this data to show you our ads. We do not combine this data with your account.

Without your consent we load nothing at all: neither Google's nor Meta's scripts, nor their cookies. You can change your mind at any time by deleting this site's cookies in your browser: we will ask you again on your next visit.

Nobody, except the providers we rely on to run the service. We don't sell data and we don't pass it to third parties for our own purposes.

• Vercel — hosting for the site and the application (servers in Frankfurt) and storage for the files you upload, such as logos and images (US company).
• Neon — database: accounts, businesses, appointments and data of the customers who book (EU).
• Resend — sending emails (confirmations, reminders, notices) (USA).
• Stripe — payments, subscriptions and invoices (USA / EU).
• OneSignal — push notifications: to customers who turn them on after booking and to people working in the business (USA).
• WhatsApp (Meta) — WhatsApp reminders to the customers who choose them (USA / EU).
• Telegram — reminders and bookings for the customers who choose Telegram (outside Switzerland and the EU).
• Google (Calendar and Meet) — only for businesses that connect their own Google account: for each online appointment it creates, in a separate “Snello” calendar, an event with the Meet room (date, time, neutral title, client name); it is also used to delete events created before 28 September 2026 (USA / EU).
• SerpApi — address suggestions while you set up your business (USA).
• Have I Been Pwned — check that your password isn't among those already leaked: it only receives the first 5 characters of its hash, never the password (international service).
• Google Analytics — visit statistics for the site and the workspace, only with your consent (USA / EU).
• Meta — measuring our ads on the site pages, only with your consent (USA / EU).

When a provider processes data outside Switzerland or the European Economic Area, the transfer relies on the standard contractual clauses provided for by the applicable law. Stripe, Google, Meta (for WhatsApp and the pixel) and OneSignal also participate in the EU-U.S. and Swiss-U.S. Data Privacy Framework.

At any time you can ask us to access your data, correct it, delete it, restrict its processing, or receive it in a machine-readable format. Write to support@snelloapp.com: we'll reply within 30 days. If you believe the processing isn't correct, you can contact the competent supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); if you live in the European Union, also the authority of your own country.

The site and the application only travel over an encrypted connection. Access to the workspace is personal, passwords are never readable by us, and you can protect your sign-in with two-factor authentication. The request form and sign-in have a limit on attempts to contain abuse.

If we change this policy, we update the date at the top. Changes relevant to existing customers are communicated by email.

See also our terms of service.