Data and privacy
3 min read
What Snoowl Audit stores
Section titled “What Snoowl Audit stores”| What | Details |
|---|---|
| Your login | Name, email address, a one-way hash of your password, and when you signed in, with the network address, for security |
| Your documents | The text read from each file, page or paste, the original of each uploaded file, and the passages indexed for search |
| What reading produces | The statements found in your documents and where your documents disagree |
| Questions | Generated, written and imported questions, with their expected answers |
| Chatbot connections | The URL, request body and answer path. API keys and header values are encrypted. Also who confirmed being authorised to test the chatbot, and when. |
| Runs | Each question asked, your chatbot’s answer, how long it took, the result and the judge’s reasons, plus your team’s review labels and notes. Each result keeps a frozen copy of the question and the passages it was judged against, so editing your documents or questions later never rewrites a past report. |
| Schedules | Settings, alert email addresses, and the Slack webhook, which is encrypted |
| Billing | Top-ups and what each action cost |
Everything stays until you delete it. Snoowl doesn’t sell any of it, and doesn’t use your documents or your chatbot’s answers to train AI models.
Secrets
Section titled “Secrets”- Chatbot API keys, header values and Slack webhooks are encrypted before they’re stored, and they’re never shown back in the app.
- Passwords and Snoowl Audit API keys are stored only as one-way hashes.
- Snoowl Audit contacts your chatbot only when you test the connection or a run asks it questions.
Who helps run the service
Section titled “Who helps run the service”| Provider | Role |
|---|---|
| OpenAI | Reads your documents and judges answers. Content sent through their API isn’t used to train their models. |
| Voyage AI | Ranks passages of your documents by how well they answer a question |
| ZeptoMail (Zoho) | Sends sign-up, password, invite and alert emails |
| Google Cloud and the MongoDB database host | Run the service and store the data above |
| Your own chatbot | Receives the audit’s questions, because you asked Snoowl Audit to send them |
| Slack | Receives alerts, if you add a webhook |
Records that expire on their own
Section titled “Records that expire on their own”- Pending sign-up links, password-reset links and invites expire after they can no longer be used.
- The service’s request log keeps metadata only (the route, status, timing, network address and browser) for 30 days. It never stores request bodies.
- Error reports are kept for 30 days.
Deleting
Section titled “Deleting”| What | How | What happens |
|---|---|---|
| A document or a chatbot | From its menu in the project | Past run reports stay. Deleting a chatbot removes its stored URL, headers and keys. |
| A project | Project settings | Removes its documents and files, statements, questions, test sets, chatbots, runs, results, schedules and search index. Refused while a run is going; cancel it first. |
| A workspace | Workspace settings (owners) | Removes every project, the team, API keys, invites and schedules. Billing records are kept, as financial records must be, and any remaining balance is forfeited. |
| Your login | Account settings, Delete my account | See Delete your account. |
Your copy of your data
Section titled “Your copy of your data”To ask for a copy of your data, or about anything Snoowl holds about you, email support@snoowl.com.
Cookies
Section titled “Cookies”The app keeps your sign-in in your browser’s storage. It has no advertising or tracking cookies.