Privacy Notice

1. Who we are

This service, SmartReply AI X ("SmartReply", "we", "us"), is operated by Sarang Khosa (the "Seller"). Sarang Khosa is the data controller responsible for personal data processed in connection with the SmartReply AI X service. You can contact us at hello@smartreplyaix.com.

2. Categories of personal data we collect

• Account data: name, email address, hashed password, authentication identifiers.
• Profile and content data: tweets and other text you submit, generated replies, saved tone profiles, history.
• Usage and telemetry: features used, generation counts, timestamps, error logs.
• Device and technical data: IP address, browser type, device identifiers, operating system.
• Support data: messages and attachments you send when contacting support.
• Billing data: handled by our payments provider Paddle (see Section 4); we receive limited transaction metadata such as plan, status, and country.

3. Purposes and legal bases

• Providing the service (account creation, generating replies) — performance of a contract.
• Security and fraud prevention — legitimate interests and legal obligation.
• Product improvement and analytics — legitimate interests.
• Customer support — performance of a contract and legitimate interests.
• Marketing communications — consent (you can withdraw at any time).
• Compliance with legal obligations — legal obligation.

4. How we share your data

We share personal data with the following categories of recipients:

• Paddle.com Market Limited ("Paddle") — our Merchant of Record and payments provider. Paddle handles all checkout, billing, tax, invoicing, refunds, and subscription management. See Paddle's Privacy Notice.
• Hosting and infrastructure providers (cloud hosting, CDN, database).
• AI model providers who process the prompts you submit to generate replies.
• Analytics and error-monitoring providers.
• Professional advisers (legal, accounting) where strictly necessary.
• Authorities where required by law or valid legal process.

We do not sell your personal data.

5. International transfers

Your data may be processed outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

• Account data: kept while your account is active and for up to 24 months after closure.
• Generated content and history: kept while your account is active; deleted on request.
• Billing and tax records: retained by Paddle and by us for up to 7 years to meet legal obligations.
• Logs and telemetry: typically retained for up to 12 months.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to processing of your personal data; the right to data portability; the right to withdraw consent; and the right to lodge a complaint with your local data protection authority. To exercise these rights, contact hello@smartreplyaix.com. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security.

9. Cookies

We use essential cookies required for authentication and the service to function, and limited analytics cookies to understand usage. You can control non-essential cookies via your browser settings.

10. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated via the service or by email.