Effective 14 October 2026
Snowball Data LLC, a New Mexico limited liability company (“Snowball,” “we,” “us,” or “our”) operates athex.net and its related services (the “Service”). This Privacy Policy describes how we collect, use, retain, and disclose personal information in connection with the Service. It applies to users and visitors and, where relevant, to people whose information appears in User Content or third-party records even if they do not have an account. Read this Policy alongside the Terms of Service. Capitalized terms not defined here have the meanings given in the Terms. Any consent required for a particular processing activity is requested separately. Nothing in this Policy limits your rights under applicable law.
Depending on the Service and features used, we may process:
Information you or other users provide. messages and other User Content transmitted through the Service, associated metadata, and display names or identifiers you choose. We also receive communications you send us.
Account and access information. This may include account identifiers, authentication and verification records, credential identifiers, public keys or encrypted key material, permissions, registered devices, notification subscriptions, preferences, and records concerning acceptance of legal terms.
Technical and activity information. This may include IP addresses, network information, browser and device characteristics, requests and activity records, timestamps, content identifiers and sizes, diagnostic information, and security information. We may derive signals used to operate, secure, and prevent abuse of the Service, including possible relationships between accounts based on network activity.
Software and device information. If you download or use our applications or other software, we may process information about the software and the device it runs on, such as software version, operating system, installation, download, and update records, and the technical information sent when the software connects to the Service.
Information from other sources. We may receive information from other users, source websites and platforms, public records, and third parties. Depending on the Service, this can include names, handles, linked accounts, profile information, communications, records, metadata, and classifications concerning people who do not have an ATHEX account.
Some User Content may be encrypted in a way that limits our ability to read it. Encryption does not conceal the existence or transmission of that content, and we may process the associated metadata the Service needs in order to operate, including sizes, timing, and identifiers.
User Content and third-party records may contain sensitive personal information, including private communications, credentials, health information, beliefs, racial or ethnic information, or information concerning sex life.
Do not provide sensitive information about yourself or another person unless you have the authority required for your activity and the information is reasonably necessary for a lawful use of the Service.
Your authority to submit information does not eliminate any independent legal obligations that apply to Snowball's processing.
The Service may use cookies and browser or device storage for authentication, security, preferences, content, or locally held access material. Blocking or deleting stored information may impair features or remove locally held data or keys.
Interface preferences are stored in a preference cookie and browser storage.
Third-party resources used by the Service, such as hosted content, fonts, communications infrastructure, or notification services, may receive technical connection information necessary for a request, including IP address, browser information, and request details. Their independent processing is governed by their own policies. These providers may collect information about your activity over time and across websites under their own privacy policies.
We do not currently respond to browser “Do Not Track” signals. Do Not Track is distinct from opt-out preference signals or other mechanisms that applicable privacy law may require a covered business to recognize. Where such a legal requirement applies to us, we will handle recognized signals as required by that law.
Our applications and other software store information on your device, such as settings, sign-in and security information, encrypted key material, and components the software downloads. Removing the software or its data may permanently delete information held only on your device.
Some features, including artificial intelligence features, may process information on your device. The information we receive in connection with a feature depends on the feature and your settings and may include content you choose to store, sync, or transmit through the Service and the other information described in this Policy.
We may make software updates available. Updates are installed automatically only if you enable automatic updates. Downloads of software, updates, and related components may be delivered by service providers, who receive technical connection information such as IP address.
Some features may route connections through third-party networks, such as the Tor network, whose operators may receive technical connection information. We do not operate or control those networks, and their operators handle that information under their own practices. Information you provide to websites or services you access through the Service is governed by the policies of those third parties.
Where the Service supports passkeys or similar authentication, we may process credential identifiers, public keys, and verification results.
Fingerprint, face, or other biometric verification performed by your device or authenticator is generally handled by that device or authentication provider; we do not receive the biometric template merely because the authenticator uses it.
We use information as reasonably necessary to provide, administer, authenticate, and secure the Service; deliver, store, organize, and display content; manage permissions and account access; respond to support requests and communicate about the Service; diagnose problems and understand Service operation and use; detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms; provide reference or lookup functionality where offered; comply with legal obligations and lawful process; and establish, exercise, or defend legal claims and protect rights and safety.
Where applicable law requires a particular legal basis for processing, we process personal information only when an applicable basis is available. The appropriate basis depends on the information, purpose, relationship, and jurisdiction and may include performance of a contract, legitimate interests, compliance with law, consent, or another basis authorized by applicable law.
We may use automated systems to classify content or identify security, abuse, access, or operational signals. These systems may affect whether a request is allowed or content is available.
Where applicable law grants rights concerning a covered automated decision, you may exercise those rights through the methods described below. This may include human review or contesting a decision where the governing law grants those rights.
We may disclose information:
At your direction or through Service functionality. Information may be made available to recipients or audiences authorized through the applicable feature.
To service providers. We may provide information to companies performing hosting, storage, content delivery, security, communications, or other operational services for us, subject to applicable contractual and legal requirements.
For legal, security, and rights-protection purposes. We may disclose relevant information to authorities, professional advisers, or other parties when reasonably necessary to comply with law or legal process, address fraud or security incidents, enforce agreements, handle claims, or protect rights and safety.
In a corporate transaction. Information may be disclosed in connection with a proposed or completed financing, merger, acquisition, restructuring, insolvency, or transfer of the Service or related assets, subject to applicable law.
We may also disclose information with authorization or use and disclose aggregated or de-identified information where permitted by law.
Recipients may independently retain or disclose information they receive through user-directed sharing, and their activities may be outside our control.
Snowball may offer transactions or features involving licensing or other disclosures of information, including advertising-related disclosures. Whether a particular disclosure constitutes a “sale,” “sharing,” targeted advertising, or another regulated activity depends on applicable law and the transaction.
We do not treat this Policy as granting us rights in private User Content or third-party information that we do not otherwise possess.
Before engaging in a regulated sale, sharing, advertising, or licensing activity, we will provide notices, choices, obtain consent, and implement other measures required by applicable law for that activity.
Where applicable law gives you a right to opt out of a covered sale, sharing, targeted advertising, or profiling activity, you may exercise that right through the method made available for the applicable Service or by contacting [email protected].
Third-party websites, platforms, authentication providers, extensions, and other services have their own terms and privacy practices.
Where a Service feature collects information through a third-party platform at a user's direction, information accessible through that user's authorized access may be transmitted to or stored through the Service. Lookup or enrichment functions may send a queried identifier or other necessary request information to the relevant source or provider.
Use of an ATHEX feature does not itself establish that a user or Snowball has permission from a third party to collect, reproduce, disclose, or commercialize information.
We retain information according to its type, purpose, account or content status, applicable settings, operational requirements, legal obligations, security needs, and claims requirements.
Different categories may therefore have different retention periods. Content subject to expiry or deletion settings may be retained for less time than saved records, security logs, agreement records, or information subject to a legal preservation obligation.
Deletion from active systems may not immediately remove information from backups, caches, legal-preservation copies, or copies independently retained by recipients.
We use safeguards intended to protect information appropriate to the nature of the Service. No security measure, storage system, or transmission method can guarantee absolute security.
Encryption and access restrictions do not protect against every risk, including compromised devices, credentials, recipients, or providers. Protect credentials, keys, tokens, and recovery material under your control.
If applicable law requires us to notify affected people or authorities of a security incident, we will provide the required notification.
Information may be processed in the United States and in other countries where the Service or its providers operate.
If applicable law requires a particular mechanism or safeguard for an international transfer, the transfer must be handled in accordance with that requirement.
Depending on the law applicable to you and the processing, you may have rights concerning access, correction, deletion, portability, restriction or objection, withdrawal of consent, sale or advertising opt-outs, sensitive information, or certain automated processing.
To make a privacy request, including a request concerning a third-party record when you do not have an account, contact [email protected] and provide information reasonably sufficient to identify the relevant record or request. Avoid sending unnecessary sensitive information.
We may verify identity or an agent's authority when permitted or required by applicable law. We will handle applicable requests, appeals, and non-discrimination requirements as required by the law governing the request. Opt-out requests will not be subjected to identity verification where law prohibits it. You may also complain to the relevant regulator or supervisory authority.
Manage available account, content, and notification settings through the Service or your device. If promotional communications are sent, follow their opt-out instructions or contact us. Opting out of promotions does not stop necessary administrative or security notices.
ATHEX accounts and services are intended for people who are at least 18 years old and have reached the age of majority where they live. The Service is not directed to children under 13.
Information concerning a minor may nevertheless appear in content or third-party records. Contact [email protected] if you believe a child's information requires review or removal. We will address the report as required by applicable law.
We may update this Privacy Policy as our Service, practices, or legal obligations change. We will post the revised version with its effective date and provide additional notice or obtain consent when required by applicable law.
A revised policy does not by itself authorize a materially different use of previously collected personal information where applicable law requires additional notice, consent, or another legal basis.
For privacy questions or requests, contact [email protected].