Privacy Policy
Last updated: January 15, 2024
1Introduction
SMTools ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and related services. By using SMTools, you agree to the collection and use of information in accordance with this policy.
2Information We Collect
We collect the following types of information:
- Account Information: Name, email address, and profile details when you create an account.
- Social Media Tokens: OAuth access tokens for connected platforms (Facebook, Instagram, X, LinkedIn, Pinterest). We never see or store your passwords.
- Content Data: Posts, captions, images, and scheduling information you create through the Service.
- Usage Data: Features used, pages visited, timestamps, and interaction patterns within the extension.
- Device Information: Browser type, operating system, screen resolution, and extension version.
- Log Data: IP address, access times, and referral URLs for security and analytics.
3How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the SMTools extension and services.
- Process and publish your social media posts to connected platforms.
- Generate AI-powered captions, hashtags, and content suggestions.
- Optimize posting schedules for maximum engagement.
- Send account-related communications (updates, security alerts, billing).
- Improve and personalize the Service based on usage patterns.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
4Data Sharing & Disclosure
We do NOT sell your personal data. We share information only in the following cases:
- With Social Platforms: Content is sent directly to your connected platforms (Facebook, Instagram, X, LinkedIn, Pinterest) for publishing.
- Service Providers: Trusted third-party providers (hosting, payment processing, analytics) who assist in operating the Service under strict data protection agreements.
- Legal Requirements: When required by law, court order, or governmental regulation.
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified).
5Data Security
We take security seriously. Your data is protected with industry-standard encryption and security practices.
- AES-256 encryption for data at rest.
- TLS 1.3 encryption for data in transit.
- OAuth 2.0 authentication — we never store social media passwords.
- Regular security audits and penetration testing.
- SOC 2 Type II compliance in progress.
6Data Retention
- Active Accounts: Data is retained as long as your account is active.
- Deleted Accounts: All data is permanently deleted within 30 days of account deletion.
- Scheduled Posts: Deleted after publishing or upon account cancellation.
- Analytics Data: Aggregated and anonymized after 12 months.
7Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of all personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Deletion: Request permanent deletion of your personal data.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing of your personal data for specific purposes.
- Restriction: Request restriction of processing in certain circumstances.
8GDPR (European Users)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
- We process data based on consent, contract performance, and legitimate interests.
- You may withdraw consent at any time without affecting prior processing.
- You have the right to lodge a complaint with your local data protection authority.
- Data is stored in secure data centers within the US and EU.
9CCPA (California Users)
Under the California Consumer Privacy Act (CCPA), California residents have the right to:
- Know what personal information is collected and how it is used.
- Request deletion of personal information.
- Opt out of the sale of personal information (we do not sell data).
- Not be discriminated against for exercising your privacy rights.
10Cookies & Tracking
SMTools uses cookies and similar technologies for the following purposes:
- Essential Cookies: Required for authentication and core functionality.
- Analytics Cookies: Help us understand how users interact with the extension.
- Preference Cookies: Remember your settings and preferences.
For full details, see our Cookie Policy.
11Children's Privacy
SMTools is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
12Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before the changes take effect. Continued use after changes constitutes acceptance.
13Contact Us
For privacy-related questions or to exercise your rights, contact our Data Protection Officer: