Privacy Policy
Last updated: December 27, 2025
HeySmile is the data controller for the processing of personal data as described in this privacy policy. In this privacy policy, we explain what types of personal data we store and how we process it. This privacy policy applies to: heysmile.ai.
Personal Data We Collect and Process
We process the following categories of personal data:
- Contact Information: Address, phone number, email address
- Payment Information: Transaction information, payment method
Personal data is collected directly from you through information you provide to us and in connection with your use of our services and products.
How We Use Personal Data
Service Delivery/Contract Fulfillment
We use your personal data to fulfill our agreements with you, i.e., when you have ordered a product or service from us. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill an agreement with you.
Customer Relationship Management
We use your personal data to manage our customer relationship with you. This may include customer service, complaint handling, and error correction related to your customer relationship. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill an agreement with you.
Analysis, Business Development, and Service Improvement
We continuously work to develop and improve our services and products. Much of this work involves analyzing various forms of personal data, such as customer activity, customer history, and account and profile information. The legal basis for processing personal data for this purpose is our legitimate interest.
Personalized User Experience
We personalize the user experience and communication to your customer relationship, and we use personal data for this. The legal basis for processing personal data for this purpose is our legitimate interest.
Sales and Marketing
We use personal data in connection with sales and marketing of our products and services, for example by sending you emails from us. The legal basis for processing personal data for this purpose is our legitimate interest. You have the option to opt out of parts of this processing by, for example, opting out of receiving emails from us. In addition, we may also ask for your consent to use your personal data for profiling, where we infer interests and needs based on your personal data. The purpose of profiling is to make our marketing more relevant.
System Monitoring, Error Correction, etc.
We monitor our systems for errors and problems. Some of these processes involve storing and processing personal data. The legal basis for processing personal data for this purpose is our legitimate interest.
Security, Fraud Detection, and Criminal Activity
We process personal data in our work to protect our users and ourselves from fraudulent activity, abuse, and criminal activity. The legal basis for processing personal data for this purpose is our legitimate interest.
Your Rights
If you wish to exercise any of your rights, contact us at [email protected].
- Right to Access Personal Data: You can request a copy of all information we process about you. Contact us at the email address above to exercise your right of access.
- Right to Correction of Personal Data: You have the right to ask us to correct or supplement information that is incorrect or misleading.
- Right to Deletion of Personal Data: You have the right to have your personal data deleted without undue delay. You can therefore ask us to delete information about you at any time. However, note that information we are required to retain due to other legal obligations (such as accounting laws) will not be deleted.
- Limitation of Processing Personal Data: In some situations, you can also ask us to limit the processing of information about you. You do this by managing consents or reservations in our solutions.
- Object to Processing Personal Data: If we process information about you based on our tasks or based on a balance of interests, you have the right to object to our processing of information about you. You do this by managing consents or reservations in our solutions.
- Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Contact us at the email address above to receive your personal data.
You Can Complain About Our Processing of Personal Data
We hope you will let us know if you believe we do not comply with data protection laws. Please first let us know through the contact or channel you have already established with us. You can also complain about our processing of personal data to the relevant data protection authority in your jurisdiction.