1. Data Controller and Contact Information

Smartech AI is the data controller for the processing of your personal data.

2. Information We Collect

2.1. Information You Provide Directly

• Account Data: When you register, we collect your name, email address, and password (hashed).
• Payment Information: We use third-party payment processors (e.g., Stripe) to handle payment details. We do not store your full credit card number.
• Communications: Records of your correspondence with us via email or WhatsApp.

2.2. Content Data (The Core of Our Service)

• Uploaded Files: This includes your audio, video, document files, and application string files for transcription, OCR, or translation services.
• Data Security Guarantee: We guarantee that all uploaded content is treated as highly confidential. Your content is processed securely and is never shared, sold, or used to train public models.
• Retention and Deletion: Uploaded files and the resultant data (e.g., transcription text, XML files) are stored temporarily for service delivery. You can manage the retention period within your dashboard. Content is automatically deleted from our servers after the defined period or upon explicit request.

2.3. Usage and Technical Data (See also Cookie Policy)

• Service Usage: Data on how you use our services (e.g., number of pages OCR'd, hours transcribed, links created, features accessed).
• Analytics Data (Smart Links): For our Smart Deep Linking service, we collect anonymised statistics such as click-through rates, geographic data (city/country level), and OS version to provide you with campaign insights.

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Performance of a Contract: To provide the services you have subscribed to (e.g., using your uploaded files to perform transcription).
• Legitimate Interests: To improve our services, prevent fraud, and manage internal accounts.
• Legal Obligation: To comply with UK laws and regulations.

4. Your Data Protection Rights (Under UK GDPR)

You have the following rights concerning your personal data:

• Right of Access: To request copies of your personal data.
• Right to Rectification: To request correction of inaccurate data.
• Right to Erasure: To request deletion of your personal data (subject to legal obligations).
• Right to Restrict Processing: To limit the way we use your data.
• Right to Data Portability: To receive your data in a portable format.
• Right to Object: To object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected].