1. Who is responsible
[COMPANY LEGAL NAME], [REGISTERED ADDRESS], is responsible for the personal data processed through smartbd.ai.
2. What we collect
| Account | Email address, optional name, role. Passwords are stored only as a one-way hash by our sign-in provider. |
|---|---|
| Analyses | The companies, question and discovery notes you enter, and the evidence, ratings and results produced. |
| Usage | How many analyses you start and their processing cost, used for daily allowances. |
| Your notification choices and a record of emails sent to you. | |
| Contact form | What you send us, to reply to it. |
Research is about companies, not people. Public pages read during research can mention people by name, such as executives quoted in the press; we keep them only as part of the cited evidence.
3. Why we use it
To run your analyses, keep them reproducible, enforce allowances, send the emails you ask for, and keep the service secure. [COUNSEL: legal basis for each purpose.]
4. Who we share it with
Only the service providers that run Smart BD: Anthropic, Firecrawl, Supabase, Vercel and Resend. Each receives only what its job needs; the full list is on Data and security. [COUNSEL: international transfers.]
5. How long we keep it
Analyses are kept while your account exists, so earlier results can be reopened and rerun. [RETENTION: periods after account deletion and for contact messages.]
6. Your rights
You can see and correct your name and email in Account settings, delete your account there, and ask us for a copy of your data. [COUNSEL: rights under GDPR and U.S. state laws, and how to complain to a regulator.]
7. Cookies
Strictly necessary cookies keep you signed in and remember your cookie choice. One preference cookie, rows per page, is set only if you allow it. The cookie notice lists each one.
8. Contact
Privacy questions or requests: use the contact form or write to [PRIVACY EMAIL].