Privacy Policy

Smart Marketing System ("SMS," "we," "us," or "our") operates a multi-tenant link-in-bio and business page platform. This Privacy Policy explains what information we collect, how we use it, and the choices available to you — whether you're a business owner using our platform to build your page, or a visitor browsing a business's public page.

1. Who This Policy Applies To

• Business Admins: Owners and team members who create an account to manage an organization's page, buttons, services, and settings.
• Public Visitors: People who view a business's public profile page and may submit information (e.g., subscribing to updates, sending a contact inquiry).

2. Information We Collect

From Business Admins

• Account details: username, email address, password (stored as a secure bcrypt hash, never in plain text)
• Organization details: business name, tagline, about text, logo, contact info, service listings
• Usage data: login timestamps, actions taken within the admin dashboard (for security audit logs)

From Public Visitors

• Subscriber sign-ups: email address (if you choose to subscribe to a business's updates)
• Contact form submissions: name, email, phone, and message content (if you submit an inquiry)
• Analytics data: page views, button clicks, and general engagement metrics — collected in aggregate and not tied to your personal identity unless you've submitted a form

We do not knowingly collect sensitive personal information (e.g., health, financial account numbers, government IDs) through this platform.

3. How We Use Information

We use collected information to:

• Operate and maintain business admin accounts and organization pages
• Deliver the public-facing page, services listing, and contact features
• Respond to inquiries submitted through contact forms
• Send updates to subscribers who opted in (business admins are responsible for how they use their subscriber list)
• Maintain security — including audit logs, suspicious activity detection, and fraud prevention
• Improve the platform through aggregate, non-identifying analytics

We do not sell personal information to third parties.

4. Data Storage & Security

• Passwords are hashed using industry-standard encryption (bcrypt) — we never store plain-text passwords.
• Data is stored securely on protected server infrastructure.
• Access to admin and platform data is restricted by role-based permissions and authentication checks on every request.
• While we take reasonable technical measures to protect your data, no system is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing

We share information only in these limited circumstances:

• With the business you interact with: If you submit a contact form or subscribe on a business's public page, that business's admins can see the information you submitted.
• Service providers: We use secure hosting and server infrastructure providers who process data on our behalf under confidentiality obligations.
• Legal requirements: If required by law, subpoena, or to protect the rights, safety, or property of SMS, our users, or the public.

We do not share your data with advertisers or data brokers.

6. Cookies & Tracking

Our platform may use minimal cookies or local storage for:

• Keeping you logged into your admin session
• Remembering theme preferences (light/dark mode)

We do not use third-party advertising trackers.

7. Your Rights & Choices

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for subscriber communications (unsubscribe links are provided, or contact the business directly)

To exercise these rights, contact us at smsin360@gmail.com. Business admins can also directly edit or delete data via their admin dashboard (e.g., removing subscribers, deleting inquiries).

8. Data Retention

We retain personal data only as long as necessary to provide our services, comply with legal obligations, or resolve disputes. Business admins can delete subscriber and inquiry records at any time through their dashboard. Suspended or deleted organization accounts have their associated data handled per our internal retention schedule — contact us for specifics.

9. Children's Privacy

Our platform is not directed at children under 13 (or under 16 where applicable by local law), and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date above. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at: