Privacy Policy

SnowballHQ is built to help you plan and track a path out of debt. This policy explains what information the service currently handles, why it is used, and the choices available during the private beta.

Information you provide

When you create and use an account, SnowballHQ may store your email address and the financial information you choose to enter, including debts, balances, APRs, minimum payments, income sources, budget categories, transactions, bills, savings goals, payment history, budget history, and notification preferences.

Passwords are not stored in plain text. SnowballHQ stores a bcrypt password hash used to verify sign-in.

CSV imports

Bank CSV files selected through the transaction importer are parsed in your browser. The source CSV file is not uploaded as a separate file. Transactions you choose to import become part of your SnowballHQ account data and are saved with the rest of your account.

Technical and account information

SnowballHQ uses a secure session cookie to keep you signed in. The service may process your IP address for login rate limiting and security. If you enable browser push notifications, the service stores the browser push subscription needed to deliver those notifications.

How information is used

Your information is used to operate SnowballHQ: authenticate your account, save your plan, calculate debt projections, display budgets and history, deliver requested notifications, send account or password-reset email when configured, prevent abuse, troubleshoot problems, and maintain backups.

Storage and backups

During the current beta, account and financial data are stored on SnowballHQ's server in per-user application data files. The application does not currently provide application-level encryption at rest for those financial data files, so SnowballHQ does not describe them as “256-bit encrypted” or make a similar claim.

The server maintains limited dated backups to help recover account data from accidental corruption or loss. Backup behavior may change as the service moves toward a production database.

Sharing and selling

SnowballHQ does not sell personal information. Information may be processed by infrastructure or communication providers only as needed to operate the service, such as hosting and email delivery. SnowballHQ may also disclose information when required by law or when reasonably necessary to protect the service, users, or others.

Bank connections and payment processing

SnowballHQ does not currently connect directly to bank accounts. Paid subscriptions and Stripe billing are not yet active during the private beta. This policy will be updated before those features are introduced.

Retention and deletion

Account data is retained while the beta account remains active and as needed for backups, security, and recovery. Self-service account deletion is not yet available during the private beta. A beta participant who needs an account removed can request deletion through the same beta support channel used to receive access.

Security

SnowballHQ uses controls such as bcrypt password hashing, HTTPS, secure HttpOnly session cookies, login throttling, security headers, and per-user data isolation. No internet service can guarantee absolute security, and these controls should not be interpreted as a guarantee that unauthorized access can never occur.

Children

SnowballHQ is intended for adults managing household finances and is not directed to children under 13.

Changes to this policy

This policy may change as SnowballHQ leaves beta or adds features such as subscriptions, database storage, or bank connections. Material changes will be reflected by an updated effective date on this page.

Privacy questions

During the private beta, privacy requests can be made through the beta support channel used to provide access to SnowballHQ.