Privacy Policy

1. Introduction

The Small ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We may collect the following categories of information when you create an account, use the platform, or contact us:

• Account information such as email address, name, phone number, and organization details
• Usage data about how you interact with the platform, features used, and support activity
• Device and browser information including IP address, operating system, and identifiers needed for security and diagnostics
• Cookie and preference data used to keep the service functional and remember selected settings

3. How We Use Your Information

We use personal data only where there is a clear service, operational, legal, or support need.

• To provide, maintain, and improve the platform
• To provision organizations, subscriptions, and related transactions
• To send important service notifications, onboarding messages, and support responses
• To protect the platform, investigate misuse, and enforce security controls
• To develop new features and understand product usage at an aggregate level

4. Cookie Policy

We use cookies and similar storage technologies to support core functionality and your chosen preferences.

• Essential cookies are required for security, authentication, and core product behavior
• Preference cookies store settings such as language selection when allowed
• Analytics cookies are optional and are only used when explicitly enabled
• You can manage cookie choices through the consent banner or the footer cookie settings link

5. Data Sharing

We do not sell your personal information.

• We may share data with trusted service providers that help us operate, secure, or support the service under confidentiality obligations
• We may disclose information where required to comply with legal obligations or protect the platform, our customers, or the public

6. Your Rights (GDPR)

Where applicable, you can exercise the following rights regarding your personal data:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of data where retention is no longer required
• Restrict or object to certain processing activities
• Request portability of eligible data
• Withdraw consent at any time where processing is based on consent

7. Data Security

We implement technical and organizational safeguards designed to protect your data throughout the service lifecycle.

• Encryption in transit and secure infrastructure controls
• Role-based access restrictions and audit logging on sensitive workflows
• Ongoing monitoring, security reviews, and incident response processes

8. Contact Us

For privacy-related questions or requests, contact us at privacy@the-small.ai.