1. Data Controller Information
SMVue is the data controller responsible for your personal data. If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@smvue.com
- Address: SMVue, Inc.
2. Information We Collect
We collect information you provide directly to us, information we obtain automatically, and information from third parties.
2.1 Information You Provide
- Account Information: Name, email address, password (managed by our authentication provider), profile picture, and job title
- Organization Data: Company name, team member information, and organizational structure
- Meeting Content: Meeting notes, action items, deal information, and related business data you enter
- Communications: Messages, feedback, and support requests you send to us
- Payment Information: Billing details processed by our payment provider (Stripe)
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, clicks, and interaction patterns
- Device Information: Browser type, operating system, device identifiers, and IP address
- Log Data: Access times, error logs, and referring URLs
- Cookies: As described in our Cookie Policy
2.3 Information from Third Parties
- Calendar Integrations: Event data from Google Calendar or Microsoft Calendar when you connect these services
- CRM Integrations: Contact and deal data from HubSpot when you connect your account
- Authentication Providers: Basic profile information from social login providers
2.4 Google API Services Disclosure
SMVue's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your Google Calendar to SMVue, we access:
- Calendar Events: We read and write calendar events to create meeting invites on your behalf
- Email Address: We use your Google account email solely to identify your calendar connection
Limited Use Disclosure: SMVue only uses Google user data to provide and improve the calendar integration features you explicitly request. We do not use Google data for advertising, and we do not transfer Google data to third parties except as necessary to provide our Service (e.g., storing encrypted tokens in our database). You can disconnect your Google Calendar at any time from your account settings, which will revoke our access and delete your stored Google credentials.
3. How We Use Your Information
We use the information we collect for the following purposes and legal bases:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and maintaining our services | Contract performance |
| Processing payments and subscriptions | Contract performance |
| Sending transactional emails (receipts, notifications) | Contract performance |
| AI-powered features (summaries, insights, recommendations) | Contract performance |
| Analyzing usage and improving our services | Legitimate interest |
| Detecting and preventing fraud or abuse | Legitimate interest |
| Marketing communications | Consent |
| Analytics and performance monitoring | Consent (via cookie preferences) |
4. AI and Machine Learning Features
SMVue uses artificial intelligence and machine learning to provide enhanced features:
- Meeting Summaries: AI-generated summaries of your meeting notes
- Insights and Recommendations: Analysis of meeting patterns and suggestions for improvement
- Deal Forecasting: Predictive analytics for sales pipeline
- Search and Discovery: Semantic search across your meeting history
Important: Your data is processed by third-party AI providers (OpenAI, Anthropic, Google) under strict data processing agreements. These providers do not use your data to train their models. AI outputs are generated in real-time and not stored beyond what is necessary for the feature to function.
5. Information Sharing
We share your information with the following categories of recipients:
5.1 Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Clerk | Authentication | Account credentials, profile data |
| Vercel | Hosting, CDN | Request logs, performance data |
| NeonDB | Database hosting | All application data (encrypted) |
| PostHog | Product analytics | Usage events (with consent) |
| Sentry | Error monitoring | Error logs, stack traces (with consent) |
| Resend | Email delivery | Email addresses, message content |
| OpenAI/Anthropic/Google | AI features | Meeting content for processing |
| Stripe | Payments | Billing information |
5.2 Other Disclosures
We may also share information:
- With your consent or at your direction (e.g., sharing with team members)
- To comply with legal obligations or valid legal requests
- To protect our rights, privacy, safety, or property, or that of our users
- In connection with a merger, acquisition, or sale of assets (with notice to you)
6. Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion + 30 days |
| Meeting notes and business data | Until account deletion + 30 days |
| Usage analytics | 24 months |
| Error logs | 90 days |
| Payment records | 7 years (legal requirement) |
| Cookie consent records | 3 years |
7. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place:
- EU-US Data Privacy Framework: Our US-based service providers are certified under the EU-US Data Privacy Framework
- Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses for transfers to non-adequate countries
8. Your Privacy Rights
8.1 Rights Under GDPR (EU/EEA/UK Residents)
If you are located in the EU, EEA, or UK, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request limitation of processing
- Portability: Request your data in a portable format
- Objection: Object to processing based on legitimate interest
- Withdraw Consent: Withdraw previously given consent
- Lodge a Complaint: File a complaint with your local data protection authority
8.2 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the following rights:
- Right to Know: Request disclosure of personal information collected, used, and shared
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate information
- Right to Opt-Out: Opt out of the sale or sharing of personal information (we do not sell your data)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
Categories of Personal Information: We collect identifiers, commercial information, internet activity, and professional information as defined under CCPA.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
8.3 Exercising Your Rights
To exercise any of these rights:
- Self-Service: Access your account settings to update or delete your data
- Email: Contact us at privacy@smvue.com
We will respond to your request within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before processing your request.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Role-based access with least-privilege principles
- OAuth Token Security: Third-party tokens encrypted with AES-256-GCM
- Regular Audits: Security assessments and vulnerability testing
- Incident Response: Documented procedures for data breach notification
11. Children's Privacy
SMVue is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@smvue.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page with a new effective date
- Sending you an email notification (for significant changes)
- Displaying a prominent notice within our service
Your continued use of SMVue after changes become effective constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
- Email: privacy@smvue.com
- Response Time: We aim to respond within 5 business days
For EU/EEA residents: You have the right to lodge a complaint with your local supervisory authority if you believe your rights have been violated.