Privacy Policy

Information You Provide

• --Account registration data including your name, email address, and password.
• --Billing information such as payment card details processed securely through our payment providers (Stripe). We do not store your full credit card number on our servers.
• --Communications you send to us, including support requests, feedback, and survey responses.
• --Profile information you choose to add, such as your company name, job title, or website URL.

Information Collected Automatically

• --Usage data including pages visited, features used, click patterns, and session duration to help us improve our products.
• --Device information such as browser type, operating system, device type, screen resolution, and unique device identifiers.
• --Log data including IP address, access times, referring URLs, and error logs for security monitoring and debugging.
• --For browser extensions: we collect anonymized usage statistics to improve functionality. Extensions do not access, read, or transmit your browsing history or personal page content.

Cookies and Tracking Technologies

• --We use essential cookies required for the basic functionality of our services, including authentication and session management.
• --Analytics cookies (via privacy-focused analytics tools) to understand how visitors interact with our website. These are anonymized and do not track you across other websites.
• --You can manage cookie preferences through your browser settings. Disabling certain cookies may affect service functionality.

• --To provide, maintain, and improve our services: We use your information to deliver the tools and extensions you purchase, process transactions, and continuously improve product quality and performance.
• --To communicate with you: We send transactional emails (purchase confirmations, license keys, account updates), and, only with your consent, product updates and feature announcements. You can unsubscribe from marketing emails at any time.
• --To ensure security: We monitor for fraudulent activity, unauthorized access, and abuse of our services. IP addresses and device information are used for security threat detection.
• --To provide customer support: When you contact us, we use your information to troubleshoot issues, respond to inquiries, and improve our support processes.
• --To comply with legal obligations: We may process your data as required by applicable laws, regulations, or legal proceedings.

• --We do not sell, rent, or trade your personal information to third parties. Period.
• --Service providers: We share limited data with trusted third-party service providers who assist in operating our services (e.g., payment processing via Stripe, email delivery, cloud hosting via Vercel/AWS). These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
• --Legal requirements: We may disclose your information if required to do so by law, in response to valid legal processes, or to protect the rights, property, or safety of Smesh.dev, our users, or the public.
• --Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email or prominent notice on our website before your information is subject to a different privacy policy.

• --We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
• --Account data is retained for the duration of your account's existence. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
• --Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytical and product improvement purposes.
• --Purchase and transaction records are retained for a minimum of 7 years as required by tax and financial regulations.

• --We implement industry-standard security measures to protect your personal information, including: encryption of data in transit (TLS 1.3) and at rest (AES-256), regular security audits and vulnerability assessments, access controls and authentication mechanisms, and secure development practices.
• --While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach as required by applicable law.

• --Access and portability: You have the right to request a copy of the personal data we hold about you in a structured, commonly used format.
• --Correction: You can update or correct your personal information through your account settings or by contacting us directly.
• --Deletion: You can request deletion of your personal data by contacting us at privacy@smesh.dev. We will process your request within 30 days, subject to legal retention requirements.
• --Opt-out: You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or updating your communication preferences in account settings.
• --Restrict processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
• --For EU/EEA residents: You have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority.
• --For California residents: You have additional rights under the CCPA, including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell your data), and the right to non-discrimination for exercising your privacy rights.

• --Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information immediately.

• --Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, where applicable.

• --We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will also send email notifications to registered users.
• --We encourage you to review this Privacy Policy periodically for any changes.

• --If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: privacy@smesh.dev
• --You may also reach us through our website at smesh.dev/about or by writing to our registered business address.