Privacy Policy

Last updated: June 22, 2026

1. Who we are

BagSnap is operated by PXB Tech, an individual sole proprietorship registered in Alberta, Canada. For any privacy question, contact info@ibagsnap.com.

2. What information we collect

We collect only what we need to run the Service:

• Account data: your name, email address, phone number (with country code), hashed password, email-verification status, account-creation time.
• Trip data: flight number, airline, passenger name, origin and destination airports, departure date, bag details (color, brand, type, dimensions, weight, tag number, notes).
• Evidence media: photos and short videos you capture, plus the timestamp, GPS coordinates, device User-Agent, IP address, and any EXIF metadata embedded by your camera (camera make and model, original capture time, GPS coordinates from the device).
• Device and connection data: IP address, browser User-Agent string, User-Agent Client Hints (device model, OS version, architecture where the browser supplies them), ASN, ISP, approximate geolocation derived from the IP, language preference, screen and timezone settings.
• Authentication events: every successful sign-in is logged with the device, IP, ASN, and approximate location at that moment, as a fraud-prevention measure.
• Usage data: pages visited inside the Service, referrer, time of visit, and a session identifier.
• Incident reports: the structured report generated by our AI from your sealed evidence, plus any free-text description you add.

We do not collect payment information (the Service is free at this time), and we do not sell your data to anyone.

3. Why we collect it (legal bases under GDPR/UK GDPR/PIPEDA)

• To deliver the Service (performance of a contract): create your account, store trips and evidence, generate incident reports, deliver email.
• To prevent fraud and abuse (legitimate interest): impossible-travel detection, device-mismatch flagging, datacenter and VPN heuristics, retention of authentication logs.
• To comply with the law (legal obligation): respond to lawful subpoenas, court orders, and tax/accounting requirements.
• With your consent: optional features that ask for permission, such as camera, photo library, microphone, and location on the iOS app.

4. AI processing

BagSnap uses our own AI models, hosted inside our private infrastructure, for two purposes:

• to verify each photo you capture is a genuine bag photo taken at the airport (a quality review run at the moment of capture), and
• to compose your incident report from your sealed evidence when you request one.

Your photos, videos, and trip details are not shared with any third party, sold, traded, advertised against, or used to train external AI models.

15-day automatic deletion. If you do not file a claim or dispute within 15 days of sealing a trip, BagSnap permanently deletes all photos, videos, and trip details associated with it. No copies are kept and there is no recovery.

Your consent: you confirm this AI processing explicitly before starting any new trip, by reviewing the rules on the “Before you start” screen and checking the agreement box.

5. Cookies and tracking

We use only the cookies strictly necessary to keep you signed in (the session cookie issued by our authentication library) and to remember UI state. We do not use third-party advertising cookies, marketing pixels, or cross-site trackers.

6. Who we share information with

We do not share your personal information with anyone. Your account data, trips, photos, videos, and incident reports are stored only for the purpose of running the Service for you. We do not sell, rent, trade, or otherwise share your personal information for advertising, marketing, analytics, training, or any other purpose.

The only narrow exceptions are:

• At your request: if you ask us to provide you with a copy of your own information, or to send it to a destination you specify.
• Where legally required: if we receive a lawful order, subpoena, or court process, or where disclosure is necessary to protect rights, safety, or property.

7. International data transfers

Our servers, our database, our file storage, and our AI models are located in Canada. By using the Service you consent to your data being stored and processed in Canada.

8. How long we keep it

• Trips, photos, and videos (sealed): automatically and permanently deleted 15 days after sealing if no claim or dispute has been filed. You may also delete a trip at any time before then from your dashboard.
• Trips that were never sealed: drafts are deleted within 15 days of creation.
• Sealed evidence and incident reports: deleted with the parent trip. Once the trip is gone, the evidence is gone.
• Account data, login events, page views: retained while your account is active and for a reasonable period afterwards for fraud, audit, and tax purposes.
• Backups: copies of the database may remain in encrypted backups for up to 90 days after deletion.

9. Your rights

Subject to your jurisdiction (GDPR, UK GDPR, PIPEDA, CCPA/CPRA, and equivalent regimes), you may have the right to:

• access a copy of the personal information we hold about you;
• correct inaccurate information;
• delete your account and the personal information tied to it;
• port your information to another service;
• withdraw any consent you previously gave;
• object to certain processing or restrict it;
• lodge a complaint with your local data-protection authority (e.g. the Office of the Privacy Commissioner of Canada, the UK Information Commissioner’s Office, an EU data-protection authority).

To exercise any of these rights, email info@ibagsnap.com from the address on your account. We will respond within 30 days. We may need to verify your identity before acting.

10. Children

The Service is not directed to children under 13 (16 in the EU/UK), and we do not knowingly collect personal information from them. If you believe a child has signed up, contact us and we will delete the account.

11. Security

We use TLS in transit, encrypted storage at rest, scoped service identities, and a managed key vault for secrets. Passwords are stored as bcrypt hashes. No system is perfectly secure. You use the Service at your own risk and are responsible for keeping your password safe and your device free of malware.

12. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top reflects the current version. Material changes will be highlighted in-app or by email. Continued use of the Service after a change means you accept the updated Policy.

13. AS-IS Service and limitation of liability

BAGSNAP IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT ANY WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR QUIET ENJOYMENT, ALL OF WHICH ARE EXPRESSLY DISCLAIMED.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, PXB TECH, ITS OWNER, AGENTS, AND CONTRACTORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, BAGGAGE CONTENTS, TRAVEL DELAYS, OR ANY THIRD-PARTY CLAIM, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS RELATING TO THE SERVICE SHALL NOT EXCEED CAD $100 OR THE AMOUNT YOU PAID PXB TECH IN THE 12 MONTHS BEFORE THE CLAIM, WHICHEVER IS GREATER.

14. BagSnap is not a legal service

BagSnap helps you organize and present evidence about your checked luggage. The AI-generated incident reports are informational drafts, not legal advice and not a substitute for a lawyer. PXB Tech is not a law firm, not a claims adjuster, not an insurer, and not an airline. Submitting a BagSnap report does not guarantee any outcome with an airline, insurer, court, regulator, or anyone else.

15. You are responsible for the data you put in

You confirm that the photos, videos, flight information, and personal details you enter are accurate and that you have the right to submit them. We are not responsible for false, misleading, or fraudulent information you provide.

16. Indemnification

You agree to indemnify, defend, and hold harmless PXB Tech and its owner from and against any claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of (a) your use of the Service, (b) any content you submit, (c) your breach of this Policy or of any applicable law, or (d) your violation of any third-party right.

17. Governing law and venue

This Policy is governed by the laws of the Province of Alberta, Canada and the federal laws of Canada applicable there, without regard to conflicts-of-law rules. The courts located in Calgary, Alberta have exclusive jurisdiction over any dispute arising out of or relating to this Policy or the Service.

18. Contact

Questions, requests, or complaints: info@ibagsnap.com.

PXB Tech, Calgary, Alberta, Canada. This Policy is effective as of the date shown at the top.