Privacy Policy
Smighty AI, Inc. ("Smighty," "we," "us," or "our") provides document intelligence tools for parsing, extracting, classifying, editing, and reviewing documents through Smighty.ai, Studio, APIs, and related services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Services.
Information We Collect
We collect information you provide or authorize us to process, including:
- Account information, such as name, email address, organization, authentication identifiers, and account settings.
- Billing and subscription information, such as plan, usage, payment status, transaction records, AWS Marketplace buyer identifiers, Marketplace license or agreement identifiers, entitlement records, and usage metering records. Payment card details may be processed by our payment provider and are not stored directly by Smighty. For AWS Marketplace purchases, AWS Marketplace processes Marketplace billing, and Smighty does not request or store payment card or bank account details for the Marketplace purchase.
- Documents and related content that you upload, import, submit by URL, or otherwise provide to the Services.
- Prompts, schemas, instructions, batch definitions, extracted fields, parsed text, edited documents, metadata, and output files generated by the Services.
- Technical and usage information, such as API keys, request identifiers, logs, device/browser information, IP address, timestamps, pages visited, feature usage, error reports, and performance metrics.
- Communications with us, including support requests, feedback, and sales or account inquiries.
Google Drive and Google API Data
If you choose to import documents from Google Drive, we request access only after you authorize the connection through Google. We use Google Drive access to let you select files, retrieve the selected files, export supported Google Workspace files when needed, and copy those files into Smighty file storage so they can be processed by the Services.
We do not use Google Drive data to train generalized AI models, sell Google user data, or access files that you did not select or authorize for processing. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How We Use Information
We use information to:
- Provide, operate, secure, and improve the Services.
- Process documents and generate requested outputs, including parsed text, extracted data, classifications, edits, redactions, previews, and batch results.
- Authenticate users, manage accounts, enforce usage limits, bill customers, register AWS Marketplace buyers, report Marketplace usage, and provide support.
- Monitor reliability, debug errors, prevent abuse, protect against unauthorized access, and comply with legal obligations.
- Communicate with you about the Services, including support, product updates, billing, and security notices.
AI Processing and Service Providers
To provide document intelligence features, document content and related inputs may be processed by Smighty infrastructure and by service providers acting on our behalf, including hosting, storage, authentication, payment, analytics, observability, and AI/model infrastructure providers. We require service providers to process information only for authorized business purposes and subject to appropriate confidentiality and security obligations.
How We Share Information
We may share information:
- With service providers that help us operate the Services.
- With your organization or workspace administrators when you use the Services through an organization account.
- When you direct us to share information, such as through integrations or exports.
- To comply with law, legal process, or enforceable governmental requests.
- To protect Smighty, users, and the public from fraud, abuse, security threats, or illegal activity.
- In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.
We do not sell your document content or Google user data.
Data Retention
We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support backups and audit records. Uploaded files may be subject to product-specific expiration settings or customer-configured retention periods. You may request deletion of account or document data as described below.
After we verify an authorized deletion request, we will delete or de-identify requested account and document data from active systems within 30 days unless we are required or permitted to retain it for legal, security, billing, audit, backup, or dispute-resolution purposes. Backup copies are deleted or overwritten according to the applicable backup lifecycle. Security, billing, and audit logs may be retained for compliance and service-integrity purposes.
Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include authentication, access controls, tenant isolation controls, encryption in transit, encryption at rest for production data stores where supported, security monitoring, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Security Incident Reporting
If you believe Customer Content, account credentials, API keys, or other Service data may have been accessed or used without authorization, contact us at joy@smighty.ai with the subject line "Security Incident." Please include the affected account, relevant timestamps, a description of the issue, and any logs or request identifiers you can safely share. We review security reports, investigate confirmed issues, take remediation steps as appropriate, and notify affected customers when required by law, contract, or our security obligations.
Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also revoke Google Drive access through your Google Account permissions page. To make a request, contact us using the information below.
International Processing
We may process and store information in the United States and other locations where we or our service providers operate. If you use the Services from outside the United States, your information may be transferred to jurisdictions that may have different data protection rules than your location.
Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law or through the Services. The effective date above indicates when this Privacy Policy was last updated.
Contact Us
If you have questions or requests about this Privacy Policy or our privacy practices, contact us at joy@smighty.ai.