1. Who is responsible
The controller of your personal data is Serhii Dovhyi, sole proprietor, Ukraine, operating SnipeWork at snipework.com. Contact for any privacy question or request: support@snipework.com.
This policy covers the website, the web app at snipework.com/app, the SnipeWork Telegram bot and our public APIs.
2. What we collect and why
| Data | What it is | Why we use it |
|---|---|---|
| Account | Name, email address and profile picture from Google sign-in. | To create your account, sign you in and contact you about it. |
| Settings and profile | Skills, keywords, categories, budget and country filters, client quality settings, rates, portfolio links, proposal style. | To match jobs and personalize proposal drafts. |
| Upwork connection (optional) | Upwork OAuth access and refresh tokens and your Upwork username. Stored in our database, encrypted at rest by the database provider. We never see or store your Upwork password. | To read job data through the official Upwork API on your behalf and, if you turn on Auto-bid (Ultra), to submit the proposals you approve. |
| Job data | Public Upwork job posts and the client statistics shown in them (budget, country, hire rate, spend, proposals count). | To build your feed, scores and alerts, and anonymous market statistics. |
| Proposals | Drafts generated for you, their quality scores and your likes or dislikes. | To show your history and to use liked drafts as style examples. |
| Alert connections (optional) | Telegram chat ID; Discord webhook URL; Slack webhook URL. | To deliver job alerts, and Auto-bid drafts if you use Auto-bid, where you asked for them. |
| Auto-bid (optional, Ultra) | Your Auto-bid settings and prompt, your Upwork user and organization IDs (and the agency you choose), the drafts it writes, your approvals and Upwork's responses to each submission. | To write, show, submit and log the proposals you approve, and to pause Auto-bid when Upwork reports a problem. |
| Billing | Plan, subscription status, Paddle customer and subscription IDs. No card numbers. | To manage your subscription and refunds. |
| Usage and technical data | Pages visited, feature usage, IP address, browser and device type, error logs, referral code if you arrived through a referral link. | Security, debugging, preventing abuse and improving the product. |
| Messages | Emails and messages you send us. | To answer you. |
We do not sell personal data and we do not use it for third-party advertising.
3. Legal bases (GDPR)
- Contract: running your account, scanning, drafts, alerts and billing.
- Legitimate interests: security, fraud and abuse prevention, product analytics and improvement, and publishing anonymous, aggregated market statistics.
- Consent: optional connections (Upwork, Telegram, Discord, Slack) and product emails where consent is required. You can withdraw consent at any time.
- Legal obligation: tax and accounting records related to payments.
4. Service providers (sub-processors)
We share data only with providers that help us run SnipeWork, and only what each of them needs:
| Provider | Purpose |
|---|---|
| Vercel | Hosting of the website, app and APIs; server logs. |
| Supabase | Database (account, settings, jobs, proposals, tokens). |
| Paddle | Merchant of record: checkout, payments, taxes, invoices, refunds. |
| DeepSeek | AI model that drafts proposals. It receives the job text and the profile details needed for the draft (skills, rates, portfolio links, style examples), not your email or payment data. DeepSeek is based in China. |
| Telegram | Delivery of alerts and bot messages if you connect Telegram. |
| Discord | Delivery of alerts to your webhook if you connect Discord. |
| Slack | Delivery of alerts to your webhook if you connect Slack. |
| Mailchimp | Account and product emails (for example trial reminders). Every email has an unsubscribe link. |
| Cloudflare | Network, security and delivery services for parts of our infrastructure. |
| Sign-in with Google; Google Analytics on our website. | |
| Microsoft Clarity | Website usage analytics (heatmaps and session replays) on some pages. |
| Upwork | We call the official Upwork API with the permissions you grant. |
We may also disclose data if the law requires it, or to protect our users and the service against fraud or attacks.
5. How we use Upwork data
We access Upwork only through its official API and only with the permissions you grant. We use it to read job posts and the public client information in them. SnipeWork never logs in to your Upwork account and never submits a proposal unless you turn on Auto-bid (Ultra plan); then it submits, through the API, only the proposals you approve or, if you switch on automatic mode, the ones that pass your rules. You can revoke access at any time in the app or in your Upwork settings.
6. How long we keep data
- Account, settings, proposals and connections: while your account is active. When you delete your account or ask us to, we delete or anonymize this data within 30 days.
- Individual job posts: removed from the database about 7 days after they are scanned. Anonymous aggregated statistics (such as weekly averages in the Market Index) are kept, because they contain no personal data.
- Billing records: as long as tax and accounting law requires. Paddle keeps its own records as merchant of record.
- Logs and analytics: for the limited periods set by the providers above.
7. Security
Traffic is encrypted with TLS, data is encrypted at rest by our database provider, and access to production systems is limited. No system is perfectly secure; if you notice a security issue, please email support@snipework.com right away.
8. Your rights
Depending on where you live (including under the GDPR and UK GDPR), you can:
- access your data and get a copy of it;
- correct inaccurate data;
- delete your data and your account;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time;
- complain to your local data protection authority.
Email support@snipework.com from the address linked to your account. We answer within 30 days.
9. International transfers
Our providers may process data outside your country, including in the United States and, for AI drafting, in China. Where the GDPR applies, we rely on the transfer safeguards our providers offer, such as the European Commission's Standard Contractual Clauses, where they are available. If you do not want job and profile text sent for AI drafting, simply do not use the AI proposal feature.
10. Cookies and local storage
- Essential: a sign-in session cookie, and a referral cookie (7 days) when you arrive through a referral link.
- Preferences: your language choice is kept in your browser's local storage.
- Analytics: Google Analytics and Microsoft Clarity set cookies to measure how the site is used. You can block them in your browser settings or with a content blocker; the service keeps working.
11. Children
SnipeWork is for people aged 18 and over. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.
12. Changes
We will update this policy when the product or our providers change. For material changes we will notify you by email or in the app. The date at the top shows the latest version.
13. Contact
Serhii Dovhyi (SnipeWork), sole proprietor, Ukraine. Email: support@snipework.com.