Snow Labs
Legal

Privacy Policy

Effective: April 16, 2026Last updated: April 16, 2026Terms of Service →

This Privacy Policy describes how Lysensy Inc., doing business as Snow Labs(“Snow Labs,” “Lysensy,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use any of our websites, applications, APIs, or services (collectively, the “Services”).

Lysensy Inc. is a corporation federally incorporated in Canada. Snow Labs is the brand under which we build and operate software-as-a-service products across multiple industries. This Policy applies uniformly across all Snow Labs products, including:

  • VersionPill (versionpill.com)
  • Letterbox (letterbox.life)
  • Domino (domino.today)
  • Logbook (logbook.app)
  • EmailMate (emailmate.co)
  • Mailroom
  • Partners
  • BookOS (bookos.co)
  • Bookshelves (bookshelves.me)
  • AuthorKit (authorkit.app)
  • FleetKit (fleetkit.co)
  • snowlabs.co and all sub-brands, subdomains, and successor products operated by Lysensy Inc.

By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.

1. Who we are

The data controller for your personal information is:

Lysensy Inc. (doing business as Snow Labs)
Canada
Email: privacy@snowlabs.co

For the purposes of the EU/UK GDPR, Lysensy Inc. acts as the data controller. For services where you use our products to process data on behalf of your own end-users (for example, EmailMate or Mailroom), Lysensy Inc. acts as a data processor and you are the controller; a separate Data Processing Addendum governs that relationship.

2. Information we collect

We collect information in three ways: information you provide, information collected automatically, and information received from third parties.

2.1 Information you provide

  • Account data: name, email address, password hash, profile photo, username or handle, authentication identifiers (Google account ID, GitHub account ID), and one-time verification codes.
  • Billing data: billing address, tax identification, and a tokenized payment identifier from Stripe. Snow Labs never stores full card numbers, CVV codes, or bank credentials.
  • Content you create: documents, journals, letters, tasks, notes, uploads, messages, and any other content you submit to the Services.
  • Communications: messages you send to support, feedback, survey responses, and email you send to Snow Labs addresses.

2.2 Information collected automatically

  • Usage data: pages viewed, features used, buttons clicked, session duration, referring URLs, and errors encountered.
  • Device and log data: IP address, browser type and version, operating system, device identifiers, language, and timestamps.
  • Cookies and similar technologies: see Section 8.

2.3 Information from third parties

  • Identity providers: if you sign in with Google or GitHub, we receive your email, name, profile picture, and a unique account identifier.
  • Payment processors: Stripe provides limited information about your subscription, invoices, and payment status.
  • Analytics and infrastructure partners: see Section 5.

We do not knowingly collect special categories of data (health data, biometric data, precise geolocation, or data revealing racial or ethnic origin, political opinions, religious beliefs, or sexual orientation) and we do not ask you to provide it.

3. How we use information

We use personal information to:

  • provide, operate, and maintain the Services;
  • authenticate you and secure your account;
  • process payments and manage subscriptions;
  • send transactional email (password resets, verification codes, receipts, security alerts, and service announcements);
  • send product updates and marketing email where permitted; you can unsubscribe at any time;
  • respond to support requests and communicate with you about the Services;
  • monitor, detect, and prevent fraud, abuse, and security incidents;
  • analyze product usage to improve the Services and develop new features;
  • comply with legal obligations and enforce our Terms of Service.

4. Legal bases for processing (EU/UK/EEA users)

We rely on the following legal bases under the GDPR:

  • Contract (Art. 6(1)(b)): to provide the Services you have signed up for.
  • Legitimate interests (Art. 6(1)(f)): to secure the Services, prevent abuse, analyze usage, and develop our products, balanced against your rights.
  • Consent (Art. 6(1)(a)): for marketing email and non-essential cookies. You can withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and other laws.

5. How we share information

We do not sell personal information. We share it only with the service providers (“processors”) listed below, each of whom processes data on our instructions and under a written agreement.

  • Convex (database, authentication, file storage) — hosted in the United States.
  • Vercel (application hosting, CDN) — global edge network.
  • Cloudflare (DNS, email routing, CDN, R2 storage).
  • Stripe (payment processing) — United States and EU.
  • Google LLC (OAuth sign-in, Google Workspace for Snow Labs staff).
  • GitHub, Inc. (OAuth sign-in).
  • Amazon Web Services (SES email delivery via our EmailMate infrastructure).
  • PostHog (product analytics) — United States.
  • OpenAI, Anthropic, and other AI model providers — used only when you invoke AI features. Content sent to these providers is limited to what is necessary to produce the response, is not used to train their models under our commercial agreements, and is governed by their enterprise terms.

We also disclose information when required by law (subpoena, court order, regulatory request), to enforce our Terms, or in connection with a corporate transaction such as a merger, financing, or acquisition. In a corporate transaction we will notify affected users before personal data becomes subject to a different privacy policy.

6. International data transfers

Snow Labs is based in Canada. Your information is processed in Canada, the United States, and other jurisdictions where our processors operate. When we transfer personal data from the EEA, United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and UK addendum where applicable), or another lawful transfer mechanism.

7. Retention

We retain personal information only for as long as necessary to provide the Services and for the legitimate business purposes described in this Policy.

  • Account data: retained while your account is active. When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law (typically 7 years for tax and accounting records).
  • Content you create: deleted when you delete it, or within 30 days of account closure.
  • Backups and logs: may persist in encrypted backups for up to 90 days after deletion.
  • Suppression lists: if you unsubscribe from email, we retain a minimum record of your email address to ensure we do not contact you again.

8. Cookies and similar technologies

We use cookies and similar technologies (local storage, session tokens) to keep you signed in, remember preferences, and measure product usage. We use:

  • Strictly necessary cookies for authentication and security. These cannot be disabled.
  • Analytics cookies (via PostHog) to understand how the Services are used. Where required by law, we ask for consent before setting these.

You can clear cookies at any time from your browser settings. Doing so may sign you out and reset preferences.

9. Your rights

9.1 Everyone

You can:

  • access a copy of your data from within your account;
  • edit your profile and account settings at any time;
  • delete your account from within the app or by emailing us;
  • unsubscribe from marketing email using the link in any message.

9.2 EU, UK, and EEA users (GDPR)

You have the right to:

  • access your personal data;
  • rectify inaccurate or incomplete data;
  • erase your data (“right to be forgotten”), subject to legal retention requirements;
  • restrict or object to certain processing;
  • data portability (receive your data in a machine-readable format);
  • withdraw consent where processing is based on consent;
  • lodge a complaint with your local supervisory authority. A list is maintained at edpb.europa.eu.

9.3 California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect and disclose, to request deletion, to correct inaccurate information, to opt out of “sale” or “sharing” of personal information, and to limit the use of sensitive personal information. Snow Labs does not sell personal information and has not done so in the preceding 12 months. We do not use sensitive personal information for any purpose requiring a limitation right. To exercise any of these rights, email privacy@snowlabs.co.

9.4 Canadian residents (PIPEDA and provincial laws)

If you are in Canada, you may request access to and correction of your personal information, and you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or your provincial privacy regulator.

To exercise any of these rights, email privacy@snowlabs.co. We will respond within the timeframe required by applicable law (generally 30 days). We may need to verify your identity before acting on your request.

10. Security

We protect personal information using industry-standard safeguards, including encryption in transit (TLS), encryption at rest for sensitive data, access controls, audit logging, principle of least privilege, and regular security reviews. No system is perfectly secure; if we become aware of a data breach affecting your personal data, we will notify you and the appropriate regulators as required by law.

11. Children

The Services are not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

13. Third-party links and services

Our Services may link to third-party sites, and you may connect third-party services (for example, OAuth providers or model providers). Their privacy practices are governed by their own policies, which we encourage you to read.

14. Changes to this Policy

We may update this Policy to reflect changes in our practices or for legal reasons. When we make material changes, we will notify you by email or in-app notice at least 14 days before they take effect. The “Last updated” date at the top always reflects the current version.

15. Contact us

For privacy questions, data-subject requests, or to reach our privacy contact, email privacy@snowlabs.co. For general inquiries, see snowlabs.co/contact.