Privacy Policy

Last Updated: January 29, 2026

Table of Contents

1. Introduction

SMALT AI ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered research and analysis platform at smaltai.com (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information from Third Parties

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose Legal Basis
Provide, maintain, and improve the Service Contract performance
Process payments and manage subscriptions Contract performance
Communicate with you about your account and updates Contract performance / Legitimate interest
Respond to support requests and inquiries Contract performance
Detect and prevent fraud and abuse Legitimate interest
Analyze usage patterns to improve the Service Legitimate interest
Comply with legal obligations Legal obligation
Send marketing communications (with consent) Consent

4. Google API Services & User Data

Google API Disclosure: SMALT AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.1 Google Services We Access

When you connect your Google account to SMALT AI, we may request access to the following Google services:

4.2 How We Use Google Data

We use data from Google APIs solely for the following purposes:

Limited Use Compliance: We only access the minimum data necessary to provide requested features. Your Google data is never used for advertising, sold to third parties, or used to train AI models.

4.3 Google Data Storage & Retention

We handle your Google data with the following practices:

4.4 Google Data Sharing

We do NOT share your Google data with third parties except:

We Never: Sell your Google data, use it for advertising purposes, allow it to be used by third parties for advertising, or use it to train AI/ML models outside of providing the Service to you.

4.5 Revoking Google Access

You can revoke SMALT AI's access to your Google account at any time:

  1. Visit your Google Account Permissions page
  2. Find "SMALT AI" in the list of connected apps
  3. Click "Remove Access" to revoke all permissions
  4. Alternatively, contact us at support@smaltai.com to request disconnection

After revoking access, we will delete any stored OAuth tokens associated with your account within 30 days.

4.6 Google Data Security

We protect your Google data with the following measures:

5. Email Integration (Gmail & Microsoft Outlook)

Privacy First: SMALT AI's email integration is designed with your privacy as the top priority. We can only send emails on your behalf - we do NOT read, access, or monitor your inbox.

5.1 Email Services We Integrate With

When you connect your email account to SMALT AI, we integrate with:

5.2 What Email Data We Access

Send-Only Access: We ONLY have permission to send emails through your account. We do NOT have access to read your inbox, sent items, drafts, or any other email content.

When you use our email features, we access:

We do NOT access:

5.3 How We Use Email Integration

Your email connection is used solely for:

Your Approval Required: We will NEVER send an email without your explicit approval. You will always see and review the full email content before it is sent. You maintain complete control over all outgoing communications.

5.4 Email Data Storage

We handle your email-related data as follows:

5.5 Third-Party Integration (Composio)

We use Composio as our integration platform for email services. Composio:

5.6 Revoking Email Access

You can disconnect your email account at any time:

Upon disconnection, we will delete stored OAuth tokens within 30 days. Your email account and all existing emails remain completely unaffected.

6. Third-Party Data Sources (Apollo.io)

Important: Our Service integrates with Apollo.io to provide business contact discovery features. This section explains how we handle data from this source.

6.1 What Data Apollo.io Provides

When you use our business contact search features, we retrieve publicly available professional information from Apollo.io, which may include:

6.2 Source and Nature of Apollo Data

Apollo.io compiles business contact data from publicly available sources including:

6.3 How We Use Apollo Data

Business contact data retrieved through Apollo.io is used to:

Your Responsibility: When using business contact data, you must comply with applicable laws including GDPR, CCPA, and CAN-SPAM. You are responsible for obtaining necessary consents before sending marketing communications to contacts discovered through our Service.

6.4 Data Retention for Apollo Data

We do not permanently store Apollo.io data in our systems. Search results are:

6.5 Opting Out of Apollo Data

If you are a business professional whose information appears in Apollo.io's database and wish to opt out:

7. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

7.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service:

7.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

7.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

7.4 With Your Consent

We may share your information for other purposes with your explicit consent.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy:

10. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

10.1 Access and Portability

You can request a copy of your personal data in a structured, machine-readable format.

10.2 Correction

You can update your account information through your profile settings or request corrections to inaccurate data.

10.3 Deletion

You can request deletion of your personal data. Some data may be retained as required by law or for legitimate business purposes.

10.4 Restriction and Objection

You can request restriction of processing or object to certain processing activities.

10.5 Withdraw Consent

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

10.6 How to Exercise Your Rights

To exercise these rights, please contact us at privacy@smaltai.com. We will respond within 30 days.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we do not sell personal information). You will not be discriminated against for exercising these rights.

11. Cookies and Tracking

We use cookies and similar technologies to:

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

12. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can delete it.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

Privacy Inquiries

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Support Email: support@smaltai.com
Founder Direct: ethan@smaltai.com
Website: app.smaltai.com

For Google data access concerns, you can revoke access at Google Account Permissions.
For Apollo.io data opt-out requests, please visit Apollo.io Privacy Center.