Privacy Policy
Last updated: May 2026
1. Overview
This Privacy Policy explains how Studio Glos LLC, dba Smuves ("we", "us", or "our") collects, uses, and protects information when you use Smuves (the "Service"). It covers two different kinds of data: information about you as a user of the Service, and the data inside the accounts you connect to the Service, such as your HubSpot portal. These are treated differently, as explained below.
2. What Information We Collect
For the following information, we act as the data controller. We collect:
- Account Data: name, email, and password (stored hashed)
- Usage Data: IP address, browser type, device information, and how you interact with the Service
- Cookies and similar technologies: For authentication, session handling, and analytics
- Support Data: Information you provide when you contact us
3. Data in Your Connected Accounts
When you connect a platform such as HubSpot, you authorize the Service to access data in that account through OAuth, within the scopes you approve. This may include your CMS content, pages, blog posts, templates, forms, and related records, which can contain personal data belonging to you or to your own customers.
We access and process this data only to provide the Service to you and on your instructions. For this data we act as a data processor, and you are the controller. We do not use it for our own purposes, and we do not sell it. Where data protection laws such as the GDPR apply, this processing is governed by a Data Processing Agreement, available on request.
4. How We Use Your Information
We use your data to:
- Provide, operate, and improve the Service
- Respond to support requests
- Send system and account notifications
- Understand usage trends and keep the Service reliable
- Comply with legal obligations
5. Legal Basis (GDPR)
Where the GDPR applies, we process personal data based on:
- Your consent (for example, cookies or marketing)
- Contractual necessity (for example, managing your account)
- Legitimate interests (for example, improving and securing the product)
- Legal obligation
6. Service Providers and Sub-Processors
We share data with trusted third parties that help us run the Service, including:
- Hosting and infrastructure providers
- Search and data processing providers
- Payment processing through Lemon Squeezy, which acts as the Merchant of Record
- Analytics providers, such as Google Analytics
- Error monitoring and logging providers
These providers may process data only to perform services for us, under appropriate confidentiality and data protection terms. A current list of sub-processors is available on request. We never sell your data.
7. Data Retention
We keep your account data while your account is active and for a reasonable period afterward, unless a longer period is required by law. For data in connected accounts, when you disconnect a platform or uninstall the app, we delete or de-identify the associated data within a reasonable timeframe, except where we are required to retain it.
8. Your Rights
Depending on where you live, you may have the right to:
- Access, correct, or delete your personal data
- Object to or restrict processing
- Request portability of your data
- Withdraw consent at any time
- File a complaint with your local data protection authority
If you are in the United States, you may have rights under state privacy laws, including the right to know, delete, and correct your information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any of these rights, contact us at support@smuves.com.
9. Cookies
We use cookies and similar technologies for authentication, session handling, and analytics, including through tools like Google Tag Manager. You can reject non-essential cookies through your browser settings or our cookie banner.
10. Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. International Transfers
Your data may be transferred to and processed in countries outside your own, including the United States. Where required, we use safeguards such as Standard Contractual Clauses.
12. Children's Privacy
The Service is intended for business use and is not directed to children. We do not knowingly collect personal data from anyone under 16.
13. Changes to This Policy
14. Contact
Questions about this policy or your data? Email us at support@smuves.com.