Privacy Notice

Last updated: 20 May 2026

1. Who we are

This Privacy Notice describes how smyleAI (“we”, “us”, “our”) collects and uses your personal data. We are the data controller for the personal data we collect through our website, courses, AI agents, and The Circle community.

2. Personal data we collect

Account data: name, email address, password (hashed), and the profile information you choose to share (business name, city, country, industry, business stage, interests).
Authentication data: login timestamps, device and browser information, IP address.
Content you submit: AI agent requests, course notes, community posts and messages, support enquiries.
Usage and telemetry: which pages you visit, which features you use, time on page, error logs, basic device information.
Marketing preferences: newsletter opt-in status and your communication choices.
Order and billing data: collected and processed by Paddle (see section 4); we receive only the order summary needed to grant access.

3. How we use your data and our legal bases

To provide the Service (account creation, course delivery, community access, AI agent enquiries) — performance of a contract with you.
To process orders and grant access after Paddle confirms a successful payment — performance of a contract.
To keep the Service safe (security, fraud prevention, abuse detection) — legitimate interests.
To improve the Service (analytics, product research, error monitoring) — legitimate interests.
To send transactional emails (receipts, account notifications, course updates) — performance of a contract.
To send marketing emails — only with your consent (you can unsubscribe at any time).
To comply with legal obligations (tax, accounting, responding to lawful requests) — legal obligation.

4. Who we share data with

Paddle, our Merchant of Record, for payment processing, subscription management, invoicing, tax compliance, refunds and dispute handling. Paddle is a separate data controller for the data it collects in connection with the sale. See Paddle’s privacy notice at paddle.com/legal/privacy.
Service providers / sub-processors: cloud hosting, database, email delivery, analytics, error monitoring, customer support tooling, and the AI providers used by our agents. They process data on our behalf under written agreements.
Professional advisers: lawyers, accountants, auditors, where strictly necessary.
Authorities: where we are legally required to disclose data.

5. International transfers

Some of our service providers are located outside the UK or EEA. When we transfer personal data abroad we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision.

6. Data retention

We keep your personal data for as long as your account is active and for as long as we need it to provide the Service, comply with legal obligations (e.g. tax records, which we retain for at least 6 years), resolve disputes, and enforce our agreements. When data is no longer needed we delete or anonymise it.

7. Your rights

Subject to applicable law, you can ask us to:

Access the personal data we hold about you.
Rectify inaccurate data.
Erase your data (“right to be forgotten”).
Restrict or object to certain processing.
Port your data to another service.
Withdraw consent at any time (without affecting prior processing).

To exercise any of these rights, email hello@smyle.ai. We will respond within one month. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO at ico.org.uk).

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encryption at rest for sensitive fields, access controls, hashed passwords, and regular review of our security practices. No system is perfectly secure, but we take protection seriously.

9. Cookies

We use a small number of cookies and similar technologies for essential site functionality (e.g. keeping you logged in) and, with your consent, basic analytics to understand how the site is used. You can manage cookie preferences in your browser at any time.

10. Children

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from children.

11. Contact

For any privacy questions, email hello@smyle.ai.