Privacy Policy

Smart Business ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it when you use our website and services (the "Service").

1. Information we collect

• Account data: name, email address, password hash, language preference.
• Business data: business name, industry, address, phone, bank details, and any content you upload or generate inside the Service.
• Payment data: processed by Stripe; we store only customer/subscription identifiers, never full card numbers.
• Usage data: log files, device, browser, IP, pages viewed, and AI prompts/responses for product analytics and abuse prevention.
• Cookies: see our Cookie Policy.

2. How we use your data

• Provide, operate and improve the Service and the AI assistant.
• Authenticate you, process payments, and manage your subscription.
• Send service emails (security, billing, important changes).
• Comply with legal obligations and prevent fraud or abuse.

3. Legal bases (GDPR / UK GDPR)

We process personal data under one or more of these bases: performance of a contract, your consent, our legitimate interests in running the Service securely, and compliance with legal obligations.

4. Sharing your data

We share data only with processors that help us run the Service, including:

• Cloud hosting and database providers.
• Stripe (payments).
• AI model providers used to generate assistant responses.
• Authorities, where legally required.

We never sell your personal data.

5. International transfers

Some processors are based outside your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Data retention

We retain your data while your account is active and for as long as needed to comply with legal, accounting or reporting obligations. You can request deletion at any time.

7. Your rights

You may request to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Contact us using the details below.

8. Security

We use encryption in transit (TLS), encryption at rest, role-based access controls and row-level security in our database. No system is 100% secure; you are responsible for keeping your password safe.

9. Children

The Service is not directed to children under 16 and we do not knowingly collect their data.

10. Changes

We may update this Policy. We will notify you of material changes via the Service or email.