This Privacy Policy explains how SmartFish ("SmartFish," "we," "us") collects, uses, and shares information when you use SmartFish Hub (the "Service"), whether you create a Hub Page, visit one, use our marketing website, or contact support.
Data controller: SmartFish, Koutsollotremythias 16, Peyia 8560, Cyprus. Email: [email protected].
1. Information We Collect
If you create a Hub Page: account details (email, username, password - stored hashed), profile content you add (bio, images, links, products, availability), and billing information handled directly by our payment processor, Stripe - we do not receive or store your full card number.
If you visit a Hub Page: basic page-view analytics (page visited, referring link, approximate location from IP, device type), and, only if you choose to submit one, whatever you enter into a booking, purchase, or lead-capture form on that page - which is provided to the page's owner as described below.
If you contact support or use the support assistant: we collect the message, conversation, selected visitor type, name and email address you provide, together with limited technical information needed for security and rate limiting.
2. How We Use It
- To provide, maintain, and secure the Service, including hosting your Hub Page and processing bookings, orders, and leads submitted through it;
- To process subscription billing for creator accounts through Stripe;
- To send service-related emails (booking confirmations, receipts, account notices) and, where you have opted in, product updates;
- To provide creators with analytics about their own page; and
- To detect and prevent fraud, abuse, and violations of our Terms of Service.
Our legal bases are: performance of a contract when we provide an account or paid Service; legitimate interests in operating, securing and improving SmartFish and responding to enquiries; compliance with legal obligations; and consent for non-essential analytics cookies or marketing where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.
3. Who We Share It With
We do not sell your personal information. We share it only as follows:
| Recipient | Purpose |
|---|---|
| Stripe | Subscription billing (creators) and checkout for purchases/bookings made on a Hub Page (visitors). |
| Google Analytics / Google Tag Manager | Measurement of marketing-site use where you have consented to analytics cookies. |
| Anthropic | Processing support questions to generate an automated answer when the AI assistant is enabled. Messages may be sent to Anthropic only for this purpose. |
| The creator whose page you interact with | Any details you submit through a booking, purchase, or lead form on their Hub Page go directly to them, into their built-in CRM - they, not SmartFish, control how that data is used. |
| A creator's own CRM webhook (optional) | If a creator connects Zapier, Make, or a similar tool, new leads they receive are also forwarded there, at that creator's configuration - not by default. |
| Infrastructure providers | Hosting and email-delivery vendors that operate the Service on our behalf, under confidentiality obligations. |
| Legal authorities | Where required to comply with law, or to protect the rights, safety, or property of SmartFish or others. |
4. Cookies & Analytics
We use necessary cookies for login, security and essential preferences. With your consent, we may also use Google Analytics and Google Tag Manager to understand use of the marketing website. Non-essential analytics technologies should remain disabled until you choose to accept them. You can reject non-essential cookies and later change or withdraw your choice through the cookie settings tool. We do not use third-party advertising cookies at the date of this Policy.
5. Data Retention
We retain account and Hub Page data while the account remains active. Support requests are normally retained for up to 24 months. Billing and transaction records may be kept for the period required by tax and accounting law. Security logs are retained only as long as reasonably needed to investigate abuse. Lead and order data submitted to a creator remains in that creator’s account until the creator deletes it or closes the account, subject to legal backup and record-keeping periods.
6. Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain uses of it. Creators can access and delete most of their own data directly from their account settings. To exercise any of these rights - including as a visitor whose details were submitted to a creator's form - contact us using the details below and we will respond within a reasonable time.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus. Information is available at dataprotection.gov.cy.
7. Security
We use reasonable technical and organizational measures - including encrypted connections and hashed passwords - to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. International Transfers
Some providers, including Google, Stripe and Anthropic, may process data outside Cyprus or the European Economic Area. Where required, we rely on adequacy decisions, Standard Contractual Clauses or other safeguards recognised by applicable data-protection law.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you by email.
11. Contact
Questions about this Policy or requests concerning your data may be sent to [email protected], or by post to Koutsollotremythias 16, Peyia 8560, Cyprus.