Privacy Policy

1. Who we are

AppShots (appshotspreview.com) is operated by Next Tech Labs, Sharjah Media City, Sharjah, United Arab Emirates ("we", "us"). We are the data controller for the personal data described in this policy.

Questions or requests about your data: nextechlabs.dev@gmail.com.

2. What we collect

We collect only what the service needs to work:

• Account details — your name, email address, and password. Passwords are handled by Google Firebase Authentication and are never visible to us in plain text. You may also upload a profile picture.
• Your content — the projects you create, the app screenshots and images you upload, brand assets, and the text you type into your designs. This is stored so you can come back to it.
• Billing information — handled entirely by Stripe. We receive your Stripe customer ID, subscription status, plan, and billing country. We never see or store your full card number.
• Usage and device data — pages visited, features used, browser and device type, approximate location derived from your IP address, and analytics identifiers, collected — only with your consent — through Google Analytics for Firebase.
• Server logs — IP address, user agent, timestamps, and error details, kept briefly for security and debugging.
• AI feature inputs — when you use the AI background or copy features, the prompt, app description, or public repository URL you provide is sent to our AI providers to generate a result.
• Search terms — image search queries are sent to Pexels or Openverse to fetch results.
• Support messages — anything you send us by email.

3. How we use it

• To provide and maintain AppShots: sign you in, save your projects, render and export your screenshots.
• To run subscriptions: process payments, calculate tax, send receipts, and prevent fraud.
• To keep the service secure and to investigate abuse.
• To answer support requests and send transactional emails such as password resets.
• To understand how the product is used so we can improve it.
• To meet legal, tax, and accounting obligations.

Where data-protection law requires a legal basis (for example under the GDPR or UK GDPR), we rely on: performance of our contract with you (providing the service and billing), our legitimate interests (security, product improvement, support), your consent (analytics cookies where consent is required), and compliance with legal obligations.

We do not sell your personal data and we do not use it for third-party advertising.

4. Who we share it with

We use a small number of service providers who process data on our behalf:

• Google Firebase / Google Cloud — authentication, project storage (Firestore), and analytics. Data may be stored on Google servers in the United States or other regions.
• Stripe — payments, invoicing, tax calculation, and fraud prevention (Stripe Radar). See Stripe's privacy policy.
• Anthropic, OpenAI, and Stability AI — only when you use an AI feature, and only the input needed for that request. We do not send your account details to them.
• Pexels and Openverse — image search queries.
• Hostinger — delivery of transactional emails such as password resets.
• Our hosting provider — the servers that run the AppShots application and store uploaded files.

We may also disclose data when required by law, to protect our rights or users, or as part of a merger or acquisition (in which case this policy continues to apply to your data).

5. Cookies and local storage

• Essential — Firebase keeps your sign-in session in your browser's storage, and we store preferences such as your editor settings locally. The service does not work without these.
• Analytics — Google Analytics for Firebase sets cookies and identifiers to measure usage. These only load if you accept them. We ask on your first visit, Decline is as easy as Accept, and nothing analytics-related runs until you choose. Change your mind at any time with Cookie preferences at the bottom of any page, or block them with your browser, a content blocker, or Google's opt-out add-on. AppShots works exactly the same either way.

We do not use advertising or cross-site tracking cookies, and we do not show a consent banner that buries the "no".

6. How long we keep it

• Account and content data: for as long as your account exists. Deleting your account removes your projects, uploads and sign-in immediately, and cancels any subscription on the spot.
• Backups: removed data may persist in backups for up to 30 days.
• Billing records: as long as tax and accounting law requires, typically several years.
• Server logs: up to 30 days.
• AI feature inputs: not stored by us beyond the request; providers apply their own retention.

7. Security

All traffic is encrypted with TLS. Authentication is handled by Firebase. API keys and secrets live only on our servers and are never shipped to your browser. Card details go straight to Stripe and never touch our systems. No method is perfectly secure, so please use a strong, unique password and tell us right away if you suspect a problem.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data (most of it can be edited in Settings);
• delete your account and data — you can do this yourself at any time in Settings → Delete account, without asking us;
• receive your data in a portable format (your projects can be exported from the app);
• object to or restrict certain processing, and withdraw consent where processing is based on consent;
• complain to a data-protection authority, for example your local authority in the EEA or the UK.

To exercise any of these, email nextechlabs.dev@gmail.com from the address on your account. We respond within 30 days. Residents of California and similar jurisdictions: we do not sell or share personal information for cross-context behavioural advertising.

9. International transfers

We are based in the United Arab Emirates and our providers operate globally, including in the United States. Where we transfer personal data out of the EEA, the UK, or similar jurisdictions, we rely on our providers' standard contractual clauses and equivalent safeguards.

10. Children

AppShots is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We will post any changes here and update the date at the top. For significant changes we will notify you by email or in the app before they take effect.

12. Contact

Next Tech Labs, Sharjah Media City, Sharjah, United Arab Emirates · nextechlabs.dev@gmail.com · nextechlabs.org