The Creative Intelligence Co.

CREATIVE

CUSTOMER STORIES

PERSPECTIVES

ABOUT

CAREERS

Legal

Privacy Policy

Effective as of: June 1st, 2026

1. Introduction

This Privacy Policy outlines the types of personal information that is received and collected by SMOOTH, Inc. (“SMOOTH,” “we,” or “us”) and how it is used. SMOOTH offers an advertising management and business intelligence platform through which businesses (“Customers” or “you”) can manage advertising campaigns, access analytics, and use marketing tools across multiple platforms (collectively, the “Services”).

By using our Services, visiting our website at SMOOTH.com (the “Website”), or otherwise interacting with us, you agree to the collection and use of information in accordance with this policy.

2. Google API Disclosure

Limited Use Compliance Statement

SMOOTH's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google APIs to develop, improve, or train generalized AI and/or machine learning models.

3. Data Collection

We collect information that your browser sends whenever you visit our Website or use our Services. This data may include your IP address, browser type, pages visited, time and date of visit, and other diagnostic data.

Information You Provide to Us

Create an account or register for our Services
Connect third-party advertising or social media accounts
Request a demo, contact sales, or submit forms on our Website
Subscribe to emails, newsletters, or attend events
Provide payment or billing information

This information may include: name, email address, company name, job title, phone number, billing details, and the content of your requests. When you submit a form, we may supplement it with business firmographic data (such as company size or industry) from third-party providers to help us route and respond to your request.

Facebook Platform Data

Your Facebook public profile information (name, profile picture)
Your Facebook email address
Facebook Pages you manage
Facebook advertising account information
Facebook ad performance metrics and analytics
Facebook Business Manager assets you have access to

Instagram Platform Data

Your Instagram Business or Creator account information
Instagram ad performance metrics and analytics
Instagram audience insights

Threads Platform Data

Your Threads account ID (threads_user_id)
Your Instagram Business account information (linked to Threads)

We do not access or collect your Threads posts, messages, or other content beyond the basic account information necessary for our service functionality.

TikTok Platform Data

Your TikTok advertising account information
TikTok ad performance metrics and analytics
TikTok audience and campaign data
TikTok Business Center assets you have access to

4. Google API Data Access

YouTube API Access

youtube.upload: Allows uploading and managing your YouTube videos
youtube.readonly: Allows viewing your YouTube channel information, videos, and analytics data

Google Drive API Access

drive.readonly: Viewing and downloading your Google Drive files
drive.file: Creating, reading, updating, and deleting files our app created or you opened

Google Sheets API Access

spreadsheets.currentonly: Access to the currently open spreadsheet

Google Profile & Apps Script

userinfo.email. Primary email address
userinfo.profile. Basic profile information
openid. Authentication and identification
script.container.ui. Custom UIs in Google Sheets
script.external_request. External API requests from our Sheets add-on

5. Google API Data Handling Practices

Google Workspace API Limited Use Requirements

The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Usage Limitations

We limit use of Google Workspace data to providing or improving our advertising management services
We do not transfer, sell, or use user data for serving ads, including retargeting
We do not use user data to determine credit-worthiness or for lending purposes
We do not create, train, or improve machine learning or AI models

Data Transfer Restrictions

We do not transfer user data to advertising platforms, data brokers, or information resellers
Data transfers are limited to providing or improving our service features with user consent
We may transfer data for security purposes or to comply with applicable laws

No AI/ML Training: We do not use Google user data to develop, improve, or train generalized AI and/or machine learning models.

6. YouTube API Integration

When you connect your YouTube account to SMOOTH, we use Google's OAuth 2.0 to access your YouTube data. Your authentication tokens are stored securely and encrypted. You can revoke YouTube access at any time through your Google Account permissions. We do not use YouTube data to train AI or machine learning models.

7. Threads API Integration

When you connect your Threads account to SMOOTH, we access only your account ID and link it with your Instagram Business account. We do not access, read, or collect your Threads posts, messages, or any other content. You can revoke Threads access at any time through your Meta account settings.

8. Data Processing Locations

We store and process data in the United States and the European Economic Area (EEA). When transferring data outside the EEA, we ensure appropriate safeguards through standard contractual clauses and adequacy decisions.

9. Third-Party Platforms

When you connect your SMOOTH account with third-party platforms, their privacy policies also apply:

10. Data Usage

To provide, maintain, and improve our Services
To manage your advertising campaigns across connected platforms
To provide analytics, reporting, and performance insights
To notify you about changes to our Services
To provide customer support
To detect, prevent, and address technical issues and security threats
To develop anonymized statistics and insights about digital advertising trends
To verify your identity and establish your account
To send you updates, newsletters, and marketing communications (where you have opted in)
To comply with legal obligations

11. Data Sharing and Disclosure

We may disclose your personal data to:

Our staff, contractors, and service providers
Business partners, agents, and technology vendors
Payment processors and financial institutions
Professional advisers (legal, accounting, or compliance)
Government authorities where required by law
Prospective purchasers or acquirers in the event of a business sale or merger

We do not sell personal information for monetary consideration. However, our use of advertising and visitor-identification cookies (see Section 12) may constitute “sharing” or a “sale” under certain U.S. state privacy laws; see the California section below for how to opt out. When information is aggregated or de-identified, we may share it without restriction.

12. Cookies and Tracking Technologies

We and selected partners use cookies and similar technologies on our Website to operate the site, measure performance, and support our marketing. You can control non-essential cookies through the “Cookie preferences” link in our footer, and change your choice at any time.

How consent works by region

EEA, UK, and Switzerland: analytics and marketing technologies do not load until you give consent. You may accept, reject, or choose by category, and withdraw consent at any time.
United States and elsewhere: these technologies operate on an opt-out basis. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out, and you can opt out anytime via “Cookie preferences.”

Categories we use

Strictly Necessary & Performance (always active)

Vercel Web Analytics & Speed Insights — privacy-friendly, cookieless aggregate performance measurement. No cross-site tracking.

Analytics (consent / opt-out)

Google Analytics (GA4) — helps us understand, in aggregate, how visitors use the site.

Marketing & Visitor Identification (consent / opt-out)

Meta Pixel — measures the performance of our Facebook and Instagram advertising.
Clearbit (HubSpot) — identifies the company associated with a business visit.
RB2B — identifies business visitors (United States) to support our sales outreach.

Some of these technologies identify the company or individual associated with your visit (“visitor identification” or “de-anonymization”). Where consent is required, we use them only after you consent.

You can also limit interest-based advertising through the Network Advertising Initiative or Digital Advertising Alliance, and manage cookies through your browser settings.

13. Your Rights

Depending on your jurisdiction, you may have the following rights:

Right of access. Request a copy of personal data we hold about you
Right to rectification. Request correction of inaccurate or incomplete data
Right to erasure. Ask us to delete your personal data (“right to be forgotten”)
Right to restrict processing. Request we stop processing your data
Right to data portability. Request your data in a machine-readable format
Right to object. Object to processing for direct marketing or legitimate interests
Right to withdraw consent. Withdraw consent to processing at any time
Right to lodge a complaint. File a complaint with a data protection authority

To exercise these rights, contact us at qidaweimuse@gmail.com. We will respond within 30 days.

California Residents (CCPA/CPRA) — Do Not Sell or Share

If you are a California resident, you have rights to know, delete, and correct your personal information, and to opt out of its “sale” or “sharing.” While we do not sell personal information for money, our use of advertising and visitor-identification cookies (e.g., Meta Pixel, Clearbit, RB2B) may be considered a “sale” or “sharing” under California law. To opt out, use the “Cookie preferences” link in our footer to reject Marketing cookies, and/or enable a Global Privacy Control signal in your browser, which we honor automatically. We do not knowingly sell or share the personal information of individuals under 16.

Revoking Platform Access

Google/YouTube: Through your Google Account permissions
Meta (Facebook/Instagram/Threads): Through your Meta account settings
TikTok: Through your TikTok account settings

14. Data Retention

Account Data

Retained while your account is active. Deleted or anonymized within 30 days of a deletion request, except where required by law.

Platform Tokens and Credentials

Authentication tokens are revoked and deleted when you disconnect a platform or delete your account.

Campaign and Analytics Data

Retained for the duration of your account and a reasonable period afterward. Aggregated and anonymized analytics may be retained indefinitely.

Legal and Compliance

We may retain certain data beyond standard periods where required by law or to resolve disputes.

15. Security

All data encrypted at rest and in transit (AES-256)
Authentication tokens and API keys encrypted and stored securely
Secure SSL/TLS connections for all data transfers
Authentication handled via OAuth 2.0 with supported platforms
Access to your data strictly limited to authorized personnel
Regular security reviews and infrastructure monitoring

While we implement robust security measures, no method of transmission over the Internet is 100% secure.

16. Children

The Services are not intended for use by minors under the age of 16. We do not knowingly collect personal information from individuals under 16. If we become aware of such collection, we will delete that information promptly.

17. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. Changes will be effective immediately after being posted on this page. Your continued use of the Services constitutes acknowledgment of and consent to the modified policy.