Privacy Policy

Last Updated: February 14, 2026

SmartLink Basics ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you visit our website at smartlinkbasics.com (the "Website"), use our Sales CRM platform at crm.smartlinkbasics.com (the "Platform"), or interact with any of our services (collectively, the "Services").

This policy applies to all users of the Services, including visitors to the Website, registered users of the Platform, and anyone who contacts us or submits information through our forms. If you do not agree with this policy, please do not use the Services.

1. Data Controller

SmartLink Basics is the data controller responsible for the personal data collected through the Services. For questions about this policy or to exercise your data rights, please contact us through our contact page.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you create an account, use the Platform, or contact us, we may collect:

• Name and email address (account registration and contact forms)
• Password (stored in hashed form; we never store or have access to your plaintext password)
• Organization name and business information (Platform setup)
• Contact, company, deal, and activity data you enter into the Platform (your CRM data)
• Messages and content you submit through our contact form

2.2 Information Collected Automatically

When you use the Services, certain information is collected automatically:

• Device and browser information (browser type, operating system, screen resolution)
• IP address and approximate geographic location (country and region)
• Pages visited, time spent, and navigation paths
• Referring website or source
• Date and time of access

2.3 Payment Information

When you subscribe to a paid plan, payment information is collected and processed directly by our payment processor, Stripe, Inc. We do not receive, store, or have access to your full payment card number. Stripe may collect your name, email address, billing address, and payment method details. Stripe may also collect device and behavioral data (such as typing patterns and mouse movements on the payment form) for fraud prevention. Please refer to Stripe's Privacy Policy for details on how Stripe handles your payment data.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contract performance (Article 6(1)(b) GDPR): Processing necessary to provide the Services you have requested, including account registration, Platform access, and subscription management.
• Legitimate interests (Article 6(1)(f) GDPR): Processing necessary for our legitimate business interests, including website analytics, service improvement, fraud prevention, and security. Our legitimate interests do not override your fundamental rights and freedoms.
• Legal obligation (Article 6(1)(c) GDPR): Processing necessary to comply with applicable laws, such as tax and accounting requirements related to paid subscriptions.
• Consent (Article 6(1)(a) GDPR): Where you have given explicit consent, such as opting in to marketing communications. You may withdraw consent at any time.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• Providing, operating, and maintaining the Services, including your CRM data storage and retrieval
• Processing your subscription and managing billing through our payment processor
• Responding to your inquiries and providing customer support
• Analyzing usage patterns to improve the Services (using aggregated, anonymized data where possible)
• Detecting, preventing, and addressing fraud, security issues, and technical problems
• Complying with legal obligations, including tax and accounting requirements
• Sending service-related communications (account notifications, billing updates, security alerts)

5. Cookies and Tracking Technologies

We use cookies and similar technologies on the Website and Platform.

5.1 Essential Cookies

Required for the Services to function, including authentication session cookies and security tokens. These cannot be disabled without affecting functionality.

5.2 Analytics Cookies

We use Google Analytics to understand how visitors interact with the Website. Google Analytics collects anonymized data about page views, session duration, traffic sources, and general user behavior. This data helps us improve the content and performance of the Website. You can learn more about how Google uses your data at Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.3 Payment Cookies

Stripe uses cookies and similar technologies to process payments and for fraud detection. These are set when you interact with payment forms. See Stripe's Privacy Policy and Stripe's Cookie Policy for details.

5.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect the functionality of the Services.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processing: We share necessary transaction data with Stripe to process your subscription payments. Stripe acts as a data processor on our behalf for payment-related data. See Stripe's Privacy Policy.
• Analytics: Anonymized and aggregated usage data is processed by Google Analytics. No personally identifiable information is intentionally shared with Google Analytics.
• Legal requirements: We may disclose your data if required by law, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

We do not use your CRM data (contacts, companies, deals, activities you enter into the Platform) for any purpose other than providing the Services to you. We do not access, analyze, mine, or monetize your CRM data.

7. International Data Transfers

The Services are hosted in the United States. If you are accessing the Services from outside the United States, including from the EEA, UK, or Switzerland, your personal data will be transferred to and processed in the United States. We rely on the following mechanisms to ensure adequate protection for international transfers:

• Stripe participates in the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension to the EU-U.S. Data Privacy Framework, and uses Standard Contractual Clauses where applicable.
• Our infrastructure providers maintain appropriate safeguards for international data transfers in compliance with applicable data protection laws.

8. Data Retention

We retain your personal data for as long as your Account is active or as needed to provide the Services to you. Specifically:

• Account data: Retained for the duration of your Account. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
• CRM data: Retained for the duration of your Account. You may export your data at any time. Upon account deletion, CRM data is permanently deleted within 30 days.
• Billing records: Retained as required by applicable tax and accounting laws (typically up to 7 years).
• Analytics data: Aggregated and anonymized analytics data may be retained indefinitely. No personally identifiable information is retained in analytics data.
• Contact form submissions: Retained for as long as necessary to respond to your inquiry and for our records, then deleted.

9. Your Rights

9.1 Rights for All Users

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data and Account
• Export your CRM data at any time through the Platform's export functionality
• Opt out of non-essential analytics cookies

9.2 Additional Rights Under GDPR (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you also have the right to:

• Data portability: Receive your personal data in a structured, commonly used, machine-readable format
• Restriction of processing: Request that we restrict the processing of your personal data under certain circumstances
• Object to processing: Object to processing of your personal data based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal
• Lodge a complaint: File a complaint with your local data protection supervisory authority

To exercise any of these rights, please contact us through our contact page. We will respond to your request within 30 days, or within the timeframe required by applicable law.

9.3 Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including the right to know what personal data we collect, the right to request deletion, and the right to opt out of the sale of personal data. We do not sell your personal data. To exercise your CCPA rights, please contact us through our contact page.

10. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using TLS/HTTPS
• Hashed password storage (we never store plaintext passwords)
• Role-based access controls within the Platform
• Regular security reviews of our infrastructure and code

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

11. Children's Privacy

The Services are not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that data promptly. If you believe we may have collected data from a child under 18, please contact us.

12. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party services you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will update the "Last Updated" date at the top of this page and endeavor to provide additional notice through the Platform or by email for changes that materially affect how we handle your personal data. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact us through our contact page.

For GDPR-related inquiries, you may also contact your local data protection supervisory authority.