Privacy Policy

Last updated: March 19, 2026

1. Introduction

SmartOnboard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, application, and services (collectively, the "Service").

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, and password when you create an account.
  • Billing Information: Payment method details (processed by our third-party payment processor, Razorpay). We do not store your full credit card information.
  • Communications: Any information you provide when contacting our support team.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, clicks, and time spent within the Service.
  • Device Information: Browser type, operating system, device type, and IP address.
  • Cookies: We use cookies and similar tracking technologies as described in our Cookie Policy.

2.3 Information From Your End Users

When you install our tracking snippet on your application, we collect anonymized behavioral data from your end users on your behalf. This includes page views, click events, session data, and device information. This data is processed as a data processor on your behalf, and you remain the data controller.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Process transactions and send related notifications.
  • Analyze usage patterns to enhance user experience.
  • Communicate with you about updates, support requests, and promotional offers (with your consent).
  • Detect, prevent, and address security issues and fraud.
  • Comply with legal obligations.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party companies that help us operate the Service (e.g., Supabase for database hosting, Razorpay for payments, Vercel for hosting).
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • With Your Consent: When you explicitly authorize us to share your data.

5. Data Retention

We retain your account information for as long as your account is active. End-user event data is retained according to your subscription plan:

  • Free Plan: 30 days data retention.
  • Starter Plan: 90 days data retention.
  • Growth Plan: 365 days data retention.

Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your personal data.
  • Data Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing of your personal data for certain purposes.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at smartonboardai@gmail.com.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable, to protect your data in accordance with this Privacy Policy.

9. GDPR Compliance

For users in the European Economic Area (EEA), we process data under the following legal bases: performance of a contract, legitimate interest, compliance with legal obligations, and consent. Our Data Protection Officer can be reached at smartonboardai@gmail.com.

10. CCPA Compliance

For California residents: We do not sell personal information. You have the right to know what personal information is collected, request deletion, and opt-out of any future sale of personal information. Contact us at smartonboardai@gmail.com to exercise these rights.

11. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:

  • Email: smartonboardai@gmail.com