Privacy Policy

Last updated: Apr 22, 2026

1. Introduction

Smalts (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and related services (collectively, the “Service”). By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information we collect

We may collect the following categories of information:

  • Account information. Such as your name, email address, and password (stored in hashed form) when you register or update your profile.
  • Authentication and security data. Including session identifiers, two-factor authentication settings, and recovery codes when you enable those features.
  • Connected third-party data. When you choose to connect external accounts (for example, social or advertising platforms), we may receive identifiers, tokens, and profile or account metadata as permitted by that provider’s authorization flow. We only request the permissions you approve.
  • Usage and technical data. Such as IP address, browser type, device information, approximate location derived from IP, pages viewed, and timestamps. This helps us operate, secure, and improve the Service.
  • Communications. Content of messages you send to us (for example, support requests) and related metadata.

3. How we use information

We use collected information to:

  • Provide, maintain, and improve the Service;
  • Authenticate users, prevent fraud, and protect security;
  • Facilitate integrations you authorize with third-party platforms;
  • Send transactional or service-related communications (such as verification or security notices);
  • Comply with legal obligations and enforce our Terms of Service;
  • Analyze usage in aggregate or de-identified form to understand product performance.

We do not sell your personal information. We do not use your data for automated decision-making that produces legal or similarly significant effects without appropriate safeguards where required by law.

4. Cookies and similar technologies

We may use cookies, local storage, and similar technologies to keep you signed in, remember preferences (such as theme), and measure basic usage. You can control cookies through your browser settings; disabling certain cookies may limit functionality of the Service.

5. Sharing of information

We may share information only in these situations:

  • Service providers. Trusted vendors who host infrastructure, send email, or provide analytics, bound by confidentiality and data-processing terms.
  • Third-party platforms. When you direct us to connect an external account, limited data may be exchanged with that provider as needed to perform the integration you requested.
  • Legal and safety. When required by law, regulation, legal process, or to protect the rights, safety, and security of users, the public, or our operations.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

6. Data retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer period is required or permitted by law. When data is no longer needed, we delete or anonymize it in accordance with our retention practices.

7. Security

We implement technical and organizational measures designed to protect your information, including encryption in transit where appropriate, access controls, and secure credential handling. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. International transfers

If you access the Service from outside the country where our servers or processors are located, your information may be transferred to and processed in other countries. We take steps designed to ensure appropriate safeguards where required by applicable law.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information; object to or restrict certain processing; or withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below. We may need to verify your identity before fulfilling a request.

10. Children’s privacy

The Service is not directed at individuals under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Where required, we will provide additional notice. Continued use of the Service after changes constitutes acceptance of the updated policy, except where restricted by law.

12. Contact

For questions about this Privacy Policy or our privacy practices, contact us at the email address provided for your account or service administration, or through the contact method published on our website.