1. Data controller
The controller of personal data processed in connection with SMTailor is SMTailor, [UZUPEŁNIJ ADRES ADMINISTRATORA PRZED PUBLIKACJĄ].
For privacy, data-protection or GDPR-rights requests, contact [UZUPEŁNIJ ADRES E-MAIL DS. PRYWATNOŚCI PRZED PUBLIKACJĄ].
2. Data we process
We may process account and login data, business and brand information, websites supplied by the user, uploaded photos, video, audio, logos and text, projects and generated content, subscription identifiers, technical logs and support correspondence.
Payment-card details are generally handled by the payment provider rather than directly by SMTailor.
3. Website analysis
SMTailor can analyse websites selected by the user to build a business profile and identify the offer, audiences, communication style, visual direction and brand differentiators.
Do not submit special-category or other unnecessary personal data. Where Article 14 GDPR applies to data obtained from public sources, we comply with the relevant transparency duties.
4. Purposes and legal bases
Account operation, service features, project storage, content generation and subscription management rely on Article 6(1)(b) GDPR where necessary for a contract.
Legal obligations rely on Article 6(1)(c); security, abuse prevention, debugging, claims and service development may rely on legitimate interests under Article 6(1)(f). Where consent is required, Article 6(1)(a) applies.
5. Artificial intelligence
SMTailor uses AI services to analyse business context and prepare strategies, copy, graphics, reels and other project elements. Data needed for a feature may be sent to an AI provider.
Do not submit sensitive data, passwords, document numbers or payment-card data unless necessary. AI output is assistive and is not used for decisions about users that produce legal or similarly significant effects.
6. Recipients
Data may be entrusted to providers of hosting, infrastructure, databases, media storage, AI services, email, monitoring and IT support.
SMTailor uses, among other technologies, Stripe for payments and subscriptions, Cloudinary for media, MongoDB technology for data storage and external AI services including OpenAI.
7. Transfers outside the EEA
Some providers may process data outside the European Economic Area. Where this happens, we use GDPR-recognised safeguards such as adequacy decisions, Standard Contractual Clauses or other lawful mechanisms.
8. Retention
Account data and projects are generally kept while the service is used and for the period needed to close the account, fulfil requests, maintain security and protect claims.
Billing records are retained as required by tax and accounting law. Backups are deleted or overwritten according to their technical retention cycle.
9. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and withdraw consent where consent is the basis.
You may lodge a complaint with the competent data-protection supervisory authority.
10. Security
We use technical and organisational measures appropriate to the service, including authentication, access controls, transmission safeguards and security monitoring.
11. Cookies and local technologies
The service may use technologies necessary for sessions, security, preferences and proper operation. Optional analytics, advertising or marketing technologies requiring consent will only be activated after the user has made a choice.
12. Children
SMTailor is a business and marketing tool. It is not directed to children and is not designed to knowingly collect children's personal data.
13. Changes
This policy may be updated as SMTailor, its technology, providers or legal requirements change. The current version is published on this page with the latest-update date.