Privacy Policy

Controller

Gruber Evi, Via Gaudententurm 12, 39020 Parcines (BZ), Italy
VAT ID IT03066110218 · info@smartcms.ai

No data protection officer has been appointed; appointment is not mandatory for this processing.

What we process, and why

• Account data — email address, name, password hash, verification status. To create and operate your account. Art. 6(1)(b) GDPR (performance of a contract).
• Content you create — entries, media, schemas and everything else you store in a space. To provide the service. Art. 6(1)(b).
• Billing data — plan, subscription status, Stripe customer and subscription identifiers. Card details are handled by Stripe and never reach our servers. Art. 6(1)(b) and 6(1)(c) (statutory retention).
• Server and audit logs — IP address, timestamp, request path, and an audit trail of changes made in the CMS. To operate the service securely and to reconstruct who changed what. Art. 6(1)(f) (legitimate interest in security and traceability).
• Usage statistics — aggregate page views via our self-hosted Umami instance, without cookies and without cross-site tracking. Art. 6(1)(f).

Recipients

We use the following processors. Those outside the EU receive data on the basis of the European Commission’s standard contractual clauses.

Error monitoring (Sentry) and usage statistics (Umami) run on our own infrastructure and are not third-party recipients.

AI features and your content

When you use an AI feature, the content you submit for that operation is sent to the AI provider selected for your space (see the table above). Those providers are located in the United States. AI features are optional: if you do not use them, no content is sent to them.

Retention

Account and content data are kept for as long as your account exists and are deleted when you delete your organisation. Billing records are kept for the statutory retention period under Italian law. Server logs are kept for a short operational period; audit records are kept for the lifetime of the space they belong to.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection under art. 15–21 GDPR, and the right to withdraw consent at any time. Write to info@smartcms.ai. You may also lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali.