• About
  • Pricing
  • Docs
  • Changelog
  • Security
Install
Sign InSign Up

Privacy & Data Processing Agreement

Last Updated: April 7, 2026

← Back to Legal overview

In Plain English

  • Local by default: The extension runs entirely in your browser. Your ServiceNow scripts, records, credentials, and business data never leave your device.
  • Minimal data: For Pro plans, we only process your email address for license verification. No ServiceNow instance data is transmitted.
  • Enterprise stays on-instance: For Store App plans, all license data lives on your ServiceNow instance. We receive no personal data.
  • Optional features, your choice: Cloud sync, AI features, and analytics are opt-in. You control what data leaves your device.

Table of Contents

  1. 1. Local Execution by Default
  2. 2. What Personal Data We Process
  3. 3. Sub-Processors
  4. 4. Security
  5. 5. Data Subjects' Rights
  6. 6. International Data Transfers
  7. 7. Children's Privacy
  8. 8. Changes to This Agreement
  9. 9. Contact

This Privacy & Data Processing Agreement describes how SN Utils B.V. ("we", "us", or "our") collects, uses, and protects your personal data when you use the SN Utils browser extension and related services. This agreement applies to both individual users and businesses.

1. Local Execution by Default

The data processed on our systems is extremely limited. Our browser extension runs entirely on your local device, within your browser, using your existing ServiceNow session and permissions.

For clarity, the following categories of data never leave your device, under any plan or configuration:

  • ServiceNow scripts, code, or business logic
  • ServiceNow record data or field values
  • ServiceNow credentials, session tokens, or authentication cookies
  • Ticket content, attachments, or other business data
  • Individual action timestamps (daily aggregates only, and only where usage analytics are enabled)

The data that we process (and which might include your personal data) is processed only to the limited extent and purposes described in Section 2.

2. What Personal Data We Process

2.1 Pro Plan (Self-Service)

Our personal data processing is limited to what is strictly necessary for operating the service. Specifically:

Personal Data required for processing payments, which are processed by Stripe. Depending on your region and the nature of your transaction, Stripe may act as merchant of record (under its Link payment brand / Lemon Squeezy LLC entity). In those cases your payment data is processed by Stripe in that capacity. Please refer to Stripe's Privacy Policy for additional details.

Personal Data required to perform license checks (at most once per day), and specifically:

DataPurpose
Email addressUser identification and license verification
IP addressTransport security (standard HTTPS)

Personal Data required to offering optional features (and exclusively to the extent that you actively choose to enable optional features) and specifically:

DataFeaturePurpose
AI promptsAI code generationTransmitted to AI sub-processor for code generation
Code snippetsCloud sync*Backup and cross-instance reuse
Slash commandsCloud sync*Backup and cross-instance reuse
Extension settingsCloud sync*Preference sync
Daily usage countsUsage analyticsAggregate ROI calculations

*Optional cloud sync data is encrypted in transit and at rest. You can disable any optional feature or delete associated data at any time through the extension settings.

2.2 Pro Trial

The 14-day Pro Trial requires only your email address. No account or password is created. We process:

DataPurpose
Email addressTrial activation, confirmation code delivery, and expiration reminders
IP addressRate limiting and abuse prevention (standard HTTPS)

Trial data is stored for the duration of the trial plus a reasonable retention period to enforce the one-trial-per-email limit. No ServiceNow instance data is collected or transmitted during the trial. Trial features run entirely in your browser.

2.3 Enterprise (Store App)

License data is held on your own ServiceNow instance. The Store App communicates with SN Utils servers for validation without transmitting any user-level personal data or instance information. SN Utils receives no personal data in this configuration as part of the standard validation flow.

2.4 Fully Autonomous Operation

For organisations with strict regulatory or security requirements, a fully disconnected setup is available. In this configuration, SN Utils operates entirely on your ServiceNow instance without any backend communication — no external calls are made and no personal data is transmitted to SN Utils. Contact support@snutils.com for more information.

2.5 Optional Features

We process additional data only to the extent that you actively choose to enable optional features, and only for the purpose of providing them:

DataFeaturePurpose
AI promptsAI code generationTransmitted to AI sub-processor for code generation
Code snippetsCloud sync*Backup and cross-instance reuse
Slash commandsCloud sync*Backup and cross-instance reuse
Extension settingsCloud sync*Preference sync
Daily usage countsUsage analyticsAggregate ROI calculations

*Optional cloud sync data is encrypted in transit and at rest. You can disable any optional feature or delete associated data at any time through the extension settings.

3. Sub-Processors

We use the following third-party sub-processors in connection with the Service:

ProviderRole / Data Processed
SupabaseDatabase and authentication — License and account data
VercelWebsite hosting
StripePayment processing — Payment, billing, and transaction data. For certain international transactions, Stripe acts as merchant of record (operating as Link / Lemon Squeezy LLC).
OpenAI / Anthropic / GoogleAI code generation — AI prompts (optional feature only)
ResendTransactional email delivery — Email address
GoogleWebsite analytics
Google / Microsoft / Mozilla / AppleWeb extension marketplaces

We may engage new sub-processors from time to time as the Service evolves. Where we intend to add a new sub-processor, we will provide reasonable advance notice by email or through a notice on our website. If you have a legitimate objection to the new sub-processor on data protection grounds, you may raise it by contacting support@snutils.com within 14 days of the notice. We will work with you in good faith to address any reasonable concern. If no resolution can be reached, you may terminate your subscription in accordance with the Service Terms, and we will issue a pro-rata refund for any unused prepaid period.

All our sub-processors are bound by data processing agreements compliant with applicable privacy laws. Where data is transferred outside the EU/EEA, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required under GDPR.

4. Security

4.1 Security Measures. To the extent we process your data on our systems, we commit to securing them by implementing technical and organisational measures consistent with applicable industry standards, including but not limited to:

  • Encryption: All data in transit uses TLS 1.3. License keys are cryptographically signed. Data stored by SN Utils, including optional cloud sync data, is encrypted at rest.
  • Access Control: Access to personal data is restricted to authorised personnel on a least-privilege basis. Multi-factor authentication is required for internal systems access.
  • Transparency and Review: The extension's source code is accessible for independent security review. We maintain clear documentation of our data collection practices and respond to security inquiries promptly.

For more information on our security setup, please see our Security page.

4.2 Personal Data Breaches. Should we be impacted by a data breach affecting your personal data, we will notify you without undue delay.

4.3 Security Inquiries. Security inquiries and vulnerability reports can be directed to security@snutils.com.

5. Data Subjects' Rights

The rights available to individuals in connection with personal data processed through the Service depend on the nature of the relationship between us.

Where the subscription is held by an individual

If you are accepting the Terms and using the Service as an individual, we act as the data controller in respect of your personal data. You may exercise your rights under applicable law (including, for EU/EEA residents, the rights of access, rectification, erasure, portability, objection, and restriction under the GDPR) directly against us by contacting support@snutils.com.

You may also lodge complaints with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Where the subscription is held by a legal entity

If you are accepting the Terms on behalf of a legal entity, that legal entity is the data controller in respect of the personal data of its employees, as uploaded on the Service. We will then act as a data processoron the data controller's behalf.

Individual users should direct any requests to exercise their data subject rights to the entity that holds the subscription. We will support data controllers in responding to data subject requests, including by providing access to relevant data, assisting with erasure or portability requests, and implementing restrictions on processing, within a reasonable timeframe and to the extent technically feasible.

Your Rights Under GDPR

If you are an EU/EEA resident, your rights include:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure:Request deletion ("right to be forgotten")
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing for direct marketing
  • Restriction: Request restricted processing under certain conditions

Your Rights Under CCPA

If you are a California resident, your rights include:

  • Know: Request disclosure of data collected
  • Delete: Request deletion of personal information
  • Opt-Out: We do not sell personal information
  • Non-Discrimination: We will not discriminate for exercising your rights

6. International Data Transfers

SN Utils B.V. is based in the Netherlands. Some of our sub-processors may process data outside the EU/EEA depending on their infrastructure and the configuration used at the time of processing. Where data is transferred outside the EU/EEA, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required under GDPR.

7. Children's Privacy

SN Utils is designed for professional use by adults in corporate environments. We do not knowingly collect information from children under 16.

8. Changes to This Agreement

We may update this Privacy & Data Processing Agreement from time to time. We will notify you of material changes by email or through a notice on our website and by updating the "Last Updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the updated agreement.

9. Contact

For privacy-related inquiries, data subject requests, or to report a concern:

SN Utils B.V.
Email: support@snutils.com
Security: security@snutils.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

By using SN Utils, you acknowledge that you have read and understood this Privacy & Data Processing Agreement.

Service Terms →Cookie Policy →Security →

Productivity tools for ServiceNow.

© 2026 SN Utils. All Rights Reserved.

SN Utils is an independent product and is not affiliated with, endorsed by, or sponsored by ServiceNow, Inc. ServiceNow is a registered trademark of ServiceNow, Inc.

Product
  • Documentation
  • Pricing
  • Changelog
  • Security
Resources
  • Getting Started
  • About
  • Business Case
  • Contact
Legal
  • Service Terms
  • Fair Use Policy
  • Privacy & Data Processing
  • Cookie Policy