Last updated: September 13, 2026
This policy explains what Igloos collects and what happens to it. It covers the igloos.ai platform and publications hosted under its root domain. If you subscribe to a publication, the publisher controls that list; this policy covers how Igloos stores and processes it on the publisher's behalf.
Information we collect
- Account data — your name, email address, byline, and your password, which is stored only in hashed form.
- Content — the posts, pages, tags, settings and media you create, and the interactives you or Snowflake build.
- Subscriber lists — the email addresses and names your readers give you, imported or collected through your signup forms, with subscribe status and dates.
- Provider keys — model provider API keys you connect. They are encrypted at rest and never displayed again.
- Agent traces — each Snowflake request stores the prompt, the reply, the tool calls with results and the token usage. You can review these in your settings.
- Signup protections — bot checks and rate limits process request data such as your IP address when you sign up.
How we use it
We use this data to run your publication and the platform: authenticating you, delivering your sites, sending transactional email such as address confirmation and post announcements, storing media and powering the agent you choose to use. We do not sell personal information.
AI features
Snowflake runs on the model provider key you connect. Prompts, relevant document context and tool results are sent to that provider to generate replies, and each exchange is traced for your review. External agents using MCP act against your content with your API key and the access you grant them. Provider keys stay encrypted on our servers and are used only for your publication's own requests.
Third-party services
Third-party services
| Service | Used for |
|---|---|
| Cloudflare | Bot protection on signup |
| Your chosen model provider | Anthropic, OpenAI or DeepSeek — only when chat runs |
| Email delivery | Confirmation messages, post announcements and newsletters |
| Storage | Uploaded media — Azure Blob Storage where configured |
Retention
Your content and settings persist until you delete them, and deletion removes public access. Agent traces are kept so you can review what the agent did on your publication.
Your rights and choices
You can access, correct and export your content at any time through the workspace, and delete posts, pages and media. To close your account or request removal of your data, contact [email protected].
Security
Passwords are stored hashed, provider keys are encrypted with AES-256-GCM, and publications are isolated from one another at the access-control layer — no request, API call or agent action can read another publication's data. No system is perfectly secure; contact us promptly if you believe something is wrong.
Children
Igloos is not directed at children under 13, and we do not knowingly collect their personal information.
Changes and contact
We will post changes here and update the effective date above; material changes will be announced on igloos.ai. Questions about privacy go to [email protected].
Part of Legal and support. Next: Terms of Service.