Legal

Last Updated: 24 February 2026

This page provides legal and corporate governance information about Snef and serves as a central index for the legal documents that govern your use of Snef’s websites, applications, products, APIs, and services (collectively, the "Services").

Snef is built for transparency. Every document referenced below is designed to meet the standards expected by institutional investors, enterprise customers, and data protection authorities across each jurisdiction in which we operate.

Snef is a cross-border technology platform headquartered in Singapore with operations in Indonesia and the United States. We build tools and infrastructure for the creator economy and modern commerce, including:

• Marketplace and social commerce (B2C) — connecting creators, brands, and consumers

• Creator tools and storefronts (SaaS) — enabling creators to build, monetise, and grow

• AI-powered content and commerce tools — generation, recommendation, and optimisation

• Snef OS (B2B SaaS) — operating system for brands, agencies, and enterprise commerce

• Fulfilled by Snef (FBS) — warehousing, logistics, and fulfilment services

Snef operates through three legal entities (together, the "Snef Group"). Each entity is duly incorporated in its respective jurisdiction and maintains independent regulatory compliance.

SNEF PTE. LTD. — 68 Circular Road #02-01, Singapore 049422. UEN: 202424026R. Incorporated: 14 June 2024. Type: Exempt Private Company. Jurisdiction: Singapore.

PT SNEF TEKNOLOGI INDONESIA — Ideacentrum Office, Jl. Yusuf Adiwinata 32/34, Central Jakarta, DKI Jakarta 10350. NIB: 2608240079302. Investment Status: PMA. Jurisdiction: Indonesia.

Snef Inc. — 447 Broadway, 2nd Floor Suite #2405, New York, NY 10013. Delaware Corporation. Effective: 27 November 2023. Jurisdiction: Delaware, USA.

Regulatory note: Each Snef entity operates under its own regulatory framework and maintains separate corporate filings, tax registrations, and compliance obligations. SNEF PTE. LTD. is the parent entity of the Snef Group.

The Snef entity responsible for providing the Services and entering into a binding agreement with you depends on your geographic location, the specific Services you use, and any Order Form or programme agreement you execute.

Indonesia — PT SNEF TEKNOLOGI INDONESIA (Marketplace, creator tools, FBS in Indonesia)

Singapore & APAC — SNEF PTE. LTD. (International operations; Snef OS default)

United States — Snef Inc. (US-facing brand and enterprise programmes)

Enterprise / B2B — as specified in Order Form (Order Form entity prevails for that scope)

Precedence rule: If you have signed an Order Form, Statement of Work, Brand Programme Agreement, FBS Agreement, or Snef OS Subscription, that executed agreement identifies your contracting entity and governs for its defined scope. These Terms of Service apply to the extent they do not conflict with the Order Form. In the event of conflict: Order Form → Programme Addendum → Terms of Service.

The following documents form the legal framework governing your use of the Services. Documents are organised by category and applicability.

4.1 Core Policies (Apply to All Users)

• Terms of Service (Global) — Master agreement governing all use of the Services across all jurisdictions and user roles. Status: LIVE.

• Privacy Policy — How we collect, use, disclose, and protect personal data. Covers PDPA, PDP Law, and CCPA/CPRA. Status: LIVE.

• Cookie Policy — Cookies and tracking technologies used on the Services; consent mechanisms and controls. Status: RECOMMENDED.

• Acceptable Use Policy — Prohibited conduct and content standards applicable to all Users. Status: RECOMMENDED.

4.2 Product and Programme Terms (Apply If You Use the Relevant Service)

• Creator Terms — Creator tools, storefronts, affiliate programmes, commissions, payouts, and creator IP. Applies to: Creators.

• Brand / Merchant Terms — Brand programmes, product listings, take rates, pricing parity, and seller obligations. Applies to: Brands / Merchants.

• Fulfilled by Snef (FBS) Terms — Warehousing, fulfilment, returns, inventory management, and logistics programmes. Applies to: FBS Participants.

• Snef OS Terms — B2B SaaS subscription, Customer Content, data processing, SLAs, and enterprise features. Applies to: Enterprise Customers.

• API and Developer Terms — API access, rate limits, integration rules, and deprecation policies. Applies to: Developers.

4.3 Data Protection and Security Documents (Enterprise and B2B)

• Data Processing Addendum (DPA) — Processor obligations, subprocessor management, security controls, breach notification, audit rights, and data deletion/return. Availability: With Order Form.

• Subprocessor List — Current third-party subprocessors used by Snef OS. Updated with 30-day advance notice for new appointments. Availability: Public Page.

• Security Overview — High-level security controls, certifications, and compliance programme summary for enterprise evaluation. Availability: On Request (NDA).

Note for enterprise customers: If you require a DPA, Security Appendix, or compliance documentation for vendor assessment, please contact [email protected]. We aim to provide documentation within five (5) business days of a verified request.

Where multiple documents apply to your use of the Services, they are interpreted in the following order of precedence (highest to lowest):

1 (Highest): Signed Order Form / SOW / DPA — governs the specific commercial relationship.

2: Programme Addendum — Creator Terms, Brand Terms, FBS Terms, Snef OS Terms, API Terms.

3: Global Terms of Service — general terms applicable to all users.

4: Privacy Policy — data processing practices (or DPA for enterprise).

5: Cookie Policy / AUP — supplementary policies.

In the event of conflict between documents at the same priority level, the document that is more specific to the relevant Services or transaction prevails.

We are committed to protecting your personal data in compliance with the Singapore Personal Data Protection Act (PDPA), Indonesia’s Personal Data Protection Law (UU PDP 2022), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and applicable international data protection standards.

Submitting a Data Subject Request: To exercise your rights (including access, correction, deletion, portability, restriction, objection, or withdrawal of consent), contact [email protected] (Attn: Data Protection Officer).

Please include: your full legal name; the email address associated with your Snef account; your country of residence; the specific right you wish to exercise; and sufficient information for identity verification.

Response Timelines: Singapore (PDPA) within 30 calendar days; Indonesia (PDP Law) within applicable regulatory timelines; California (CCPA/CPRA) within 45 calendar days (extendable by 45 days with notice); other jurisdictions within timelines required by applicable law.

Security Inquiries and Vulnerability Reporting: [email protected]. We acknowledge security reports within 48 hours and work to address confirmed vulnerabilities promptly. We support responsible disclosure practices.

All trademarks, service marks, logos, trade names, domain names, and product names displayed on or in connection with the Services are owned by Snef or its licensors and are protected by applicable Intellectual Property Rights laws in Singapore, Indonesia, the United States, and internationally.

You may not use, reproduce, or display any Snef trademark, logo, or brand asset without prior written consent, except: (a) as expressly permitted in published brand guidelines; (b) as permitted under applicable fair use or nominative use doctrines; or (c) as specifically authorised in an Order Form or programme agreement.

Infringement reports: If you believe Content on the Services infringes your Intellectual Property Rights, submit a notice to [email protected] (Attn: IP Compliance) in accordance with the procedures described in the Terms of Service.

For legal, compliance, and governance inquiries:

• General Support: [email protected]

• Privacy / DPO: [email protected] (Attn: Data Protection Officer)

• Legal Notices: [email protected]

• IP Infringement: [email protected] (Attn: IP Compliance)

• Security / Vulnerability: [email protected]

• Brand / Partnerships: [email protected]

• Enterprise / Snef OS: [email protected]

For formal legal notices requiring postal delivery, address correspondence to the registered office of the applicable Snef entity as listed in Section 2.

Snef maintains the following regulatory registrations and compliance obligations across its operating jurisdictions:

• Singapore: SNEF PTE. LTD. is registered with ACRA and complies with the Companies Act 1967, Personal Data Protection Act 2012, and applicable PDPC guidelines.

• Indonesia: PT SNEF TEKNOLOGI INDONESIA holds an NIB through OSS, operates as a PMA company, and complies with UU No. 27/2022 (PDP Law), UU ITE, and applicable trade regulations.

• United States: Snef Inc. is a Delaware corporation and complies with applicable federal and state laws, including CCPA/CPRA (California), Delaware General Corporation Law, and applicable e-commerce regulations.

We may update this Legal page and the documents referenced herein from time to time to reflect changes in applicable law, our corporate structure, or business practices. When we make material updates, we will revise the "Last Updated" date at the top of this page.

For material changes to the Terms of Service or Privacy Policy, we will provide additional notice as described in those documents.

We encourage you to review this page periodically to stay informed about our legal framework.

Snef — Singapore • Indonesia • United States

© 2026 Snef. All rights reserved.