1. Introduction
SmartPanel Technologies, Inc. ("we", "us", or "our") operates the SmartPanel platform ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, password, company/organization name
- Profile data: interests, experience roles, preferences
- Content: graphics, control configurations, rundown data, media assets you create or upload
- Communications: messages sent through support channels or feedback forms
- Integration credentials: API keys and tokens for third-party services you connect
2.2 Information Collected Automatically
- Usage data: pages visited, features used, actions performed
- Device information: browser type, operating system, screen resolution
- Log data: IP address, access times, error logs
- Performance data: page load times, error rates (via error tracking services)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your account registration and manage your subscription
- Send transactional emails (account verification, password reset, invitations)
- Provide customer support and respond to inquiries
- Monitor and analyze usage trends to improve the platform
- Detect, prevent, and address technical issues and security threats
- Enforce our Terms of Service and comply with legal obligations
4. Lawful Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data under the following legal bases as defined in Article 6 of the GDPR:
- Contract performance: processing necessary to provide the Service you requested
- Legitimate interests: improving our Service, preventing fraud, ensuring security
- Consent: where you have given explicit consent (e.g., marketing communications)
- Legal obligation: compliance with applicable laws and regulations
5. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service providers: third-party companies that help us operate the Service (hosting, email delivery, error tracking, analytics). These providers are bound by contractual obligations to protect your data.
- Third-party integrations: when you connect external services (broadcast software, streaming platforms), data necessary for the integration is shared with those services per your instructions.
- Legal requirements: when required by law, legal process, or governmental request.
- Business transfers: in connection with a merger, acquisition, or sale of assets.
6. Data Retention
- Account data: retained while your account is active and for 60 days after deletion
- Content: retained while your account is active; deleted within 60 days of account closure
- Execution logs: retained per your subscription plan (Free: 0 days, Lite: 2 days, Pro: 10 days, Studio: 30 days, Enterprise: 100 days)
- Backups: purged within 60 days of data deletion
- Legal holds: data may be retained longer if required by law
7. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS/HTTPS)
- Row-level security (RLS) for multi-tenant data isolation
- Rate limiting to prevent abuse
- Regular security audits
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Your Rights
8.1 General Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent where applicable
8.2 GDPR Rights (EEA Users)
If you are in the EEA, you have additional rights under the GDPR, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.
For international data transfers outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
8.3 CCPA/CPRA Rights (California Residents)
If you are a California resident, you have the following rights under the CCPA/CPRA:
- Right to know: what personal information we collect and how it is used
- Right to delete: request deletion of your personal information
- Right to opt-out: of the sale or sharing of personal information
- Right to non-discrimination: for exercising your privacy rights
We do not "sell" or "share" personal information as defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
9. Data Breach Notification
In the event of a data breach that affects your personal data, we will notify affected users within 72 hours as required by GDPR Article 33, and in accordance with applicable state and federal laws.
10. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a user under 18, we will take steps to delete that information promptly.
11. Cookies and Tracking
We use essential cookies and local storage for authentication, session management, and user preferences. We do not use third-party advertising cookies or cross-site tracking.
Our error tracking service collects anonymized performance data to help us identify and fix issues.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 15 days before they take effect. The "Effective" date at the top indicates when this policy was last revised.
13. Contact Us
For privacy-related inquiries, data access requests, or to exercise your rights, contact us at: support@smart-panel.app