Privacy Policy

This policy explains what personal data Smiles AI processes, why we process it, and the choices available to you.

Last updated: 30 July 2026

Data we collect

We process account and contact details such as your email address, business profile, team access and subscription records. When you use the service, we may also process customer contact details, conversations, knowledge-base content, AI settings, integration identifiers, support requests, and technical logs associated with your account.

Why we process data

We use this data to authenticate users, operate and secure the service, generate and deliver configured AI replies, maintain conversation and customer records, provide support, administer subscriptions, diagnose faults, and improve service reliability. We do not sell conversation data.

Service providers and integrations

We rely on service providers for cloud hosting, databases, authentication, email delivery and AI processing. Data is also shared with integrations you choose to enable, which may include Meta services for messaging, Stripe for payments or billing, and Google services for calendar features. Each provider processes data under its own terms and privacy practices.

Cross-border processing

Our service providers and the integrations selected by a merchant may process data outside Hong Kong. Where cross-border processing occurs, we use contractual and technical measures appropriate to the service and the information involved.

How long we keep data

We retain data only while it is reasonably needed to provide the service, maintain security and business records, resolve disputes, or meet applicable obligations. The period depends on the type of data, account status and connected service. Deletion requests may not immediately remove information from protected backups or records that we must retain.

Security

We use reasonable access controls, credential protections, monitoring and safeguards available through our infrastructure providers. No online service can eliminate every security risk, so merchants should also protect their accounts and integration credentials.

Access, correction and deletion

You may ask to access or correct personal data associated with your account, or request deletion where applicable. We may need to verify your identity and may decline or limit a request where retention is required or another lawful exception applies.

Cookies and similar technologies

The dashboard uses cookies or similar storage for sign-in, session continuity, security and basic product operation. We may use limited usage information to understand reliability and improve the product.

Contact us about privacy

For privacy questions or a request to access, correct or delete personal data, email csnsales@smiles-ai.com.