Trust Center
How we protect your data, who processes it for us, and how to reach us about it.
Last updated: October 28, 2026
Company information
SnapWidget is a product of Espresso Dev (Pty) Ltd, a technology company registered in South Africa.
- Legal name:
- Espresso Dev (Pty) Ltd
- Registration number:
- 2015/437542/07
- Country:
- South Africa
- Founder:
- Herman Schutte
- Product:
- SnapWidget
- Contact:
- support@snapwidget.com
Privacy and GDPR compliance
SnapWidget supports compliance with the GDPR, the UK GDPR, South Africa's POPIA and California's CCPA/CPRA. For your account we are the controller. For the content in your widgets and the people who see them, we process personal data for you as a processor.
- A Data Processing Agreement that includes the EU Standard Contractual Clauses
- A published list of subprocessors, with their location and transfer safeguard
- Self-serve account deletion, and access and export requests by email
- Encryption in transit and at rest
- Notice of a personal data breach within 48 hours
Data requests
To delete your account and its widgets, open Settings and click Delete under "Delete account". For a copy of your data, a correction or any other request about your personal data, email support@snapwidget.com.
Data Processing Agreement (DPA)
Our DPA sets out how we process personal data for you and the safeguards that apply. It is part of our Terms of Service, so you do not have to sign anything. A counter-signed copy is available on request.
What the DPA covers
- What we process, why, and for how long
- Our technical and organisational security measures
- Breach notice within 48 hours, and help with incidents
- Help with requests from data subjects
- International transfers under the Standard Contractual Clauses
Subprocessors
We use the services below to run SnapWidget. Each one is bound by contract to protect your data. We update this list before we add or replace a subprocessor.
| Provider | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Amazon Web Services | Cloud storage | United States | EU-US Data Privacy Framework |
| Anthropic | AI features | United States | Standard Contractual Clauses |
| Automattic | Profile pictures (Gravatar) | United States | Standard Contractual Clauses |
| Cloudflare | Content delivery and security | United States | EU-US Data Privacy Framework |
| DataFast | Website analytics | Singapore | Standard Contractual Clauses |
| DataForSEO | Data services | Estonia (EU) | Not applicable (EU) |
| DigitalOcean | Cloud hosting | United States | EU-US Data Privacy Framework |
| Drip | Email communication | United States | EU-US Data Privacy Framework |
| Analytics and business tools | United States | EU-US Data Privacy Framework | |
| Intercom | Customer support | United States | EU-US Data Privacy Framework |
| Mailgun | Email delivery | United States | EU-US Data Privacy Framework |
| Mintlify | Help documentation | United States | Standard Contractual Clauses |
| Paddle | Payment processing | United Kingdom, United States | Standard Contractual Clauses |
| Rewardful | Affiliate program | Canada | Adequacy decision (Canada) |
| ScrapingBee | Data services | France (EU) | Not applicable (EU) |
| Sentry | Error monitoring | United States | EU-US Data Privacy Framework |
| Slack | Team communication | United States | EU-US Data Privacy Framework |
The platforms that your content comes from (Instagram, Facebook, TikTok, YouTube, X, Google and G2) are not on this list: they share content with us under their own terms. Cookies that other companies set on snapwidget.com are listed in our Cookie Policy.
Security measures
Encryption
- HTTPS (TLS) on the website, the app and every widget
- Database and backups encrypted at rest
- Passwords stored as one-way hashes
Access controls
- Two-factor authentication available on every account
- Email verification for new accounts
- Password check before an account is deleted
Infrastructure
- Cloud hosting in the United States
- Firewall and DDoS protection
- Automated daily backups
Monitoring
- Error and uptime monitoring
- Alerts when something goes wrong
- Breach notice within 48 hours
AI features
- AI image descriptions (alt text) for Pro widgets
- Our AI provider does not train its models on your data
- Can be turned off for each widget
Found a vulnerability? See our security page for how to report it.
Your data rights
Depending on where you live, you have these rights over your personal data:
Access and portability
- Right to access your data
- Right to data portability
- Right to rectification
Control and deletion
- Right to erasure
- Right to restriction
- Right to object
To use any of these rights, email support@snapwidget.com. You can also complain to your data protection authority. In South Africa, that is the Information Regulator.
