Privacy Policy
Last updated: 6 July 2026
This Privacy Policy explains how Smilee ("we", "us") collects, uses, and protects your personal data when you visit smilee.ai or use our chat and AI services, and describes your rights under the EU General Data Protection Regulation (GDPR).
Data controller
The controller responsible for your personal data is Smilee Oy, Elektroniikkatie 3, 90590 Oulu, Finland.
For any privacy-related questions or to exercise your rights, contact us at info@smilee.ai.
Personal data we collect
Data you provide
When you fill in our contact form, book a meeting, or chat with us, we collect the information you give us, such as:
- First and last name
- Email address
- Company name
- Phone number (optional)
- The content of your message or conversation
Data collected automatically
When you use the site, we and our analytics providers may automatically collect technical and usage data, including your IP address, browser type and version, device information, the pages you visit, and the date, time, and duration of your visit.
Cookies and tracking technologies
We use cookies and similar technologies (such as local storage, tags, and pixels) to run the site, remember your preferences, and understand how the site is used. Cookies fall into three categories:
- Necessary
- Required for the site to function and to remember your cookie choice. These are always active.
- Analytics
- Help us understand how visitors use the site so we can improve it. Loaded only after you consent.
- Functionality
- Remember choices such as your language preference to give you a more personal experience.
Non-essential cookies (analytics and session recording) are set only after you accept them in our cookie banner. You can change or withdraw your choice at any time, and you can also block cookies through your browser settings.
Third-party services and processors
We use the following service providers, who process data on our behalf:
- Google Analytics 4 & Google Tag Manager (Google Ireland Ltd)
- Website analytics and tag management. Analytics runs under Google Consent Mode and is enabled only with your consent.
- Hotjar / Contentsquare (Contentsquare SAS)
- Heatmaps and session recordings to help us improve usability. Loaded only after you accept analytics cookies.
- HubSpot (HubSpot Ireland Ltd)
- Meeting scheduling and management of contact and lead information.
- Cloudflare (Cloudflare, Inc.)
- Website hosting, content delivery, and security.
- Smilee chat & co-browsing widget
- Our own chat and AI service, used to answer questions and, where you choose, share your screen with an agent.
We may also share personal data where required by law, to enforce our agreements, or in connection with a merger, acquisition, or sale of assets.
Why we process your data and the legal basis
We process your personal data on the following legal bases under Article 6 of the GDPR:
- Consent — for analytics, session recording, and marketing communications; you may withdraw consent at any time.
- Performance of a contract or pre-contractual steps — to respond to your enquiries, provide our services, and manage your requests.
- Legitimate interests — to keep the site secure, prevent misuse, and improve our services.
International data transfers
Some of our providers are located outside the European Economic Area (for example in the United States). Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision to protect your data.
How long we keep your data
We retain personal data only for as long as necessary for the purposes described here, to comply with our legal obligations, resolve disputes, and enforce our agreements. Usage and analytics data is generally kept for a shorter period. Specific retention periods are available on request.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request erasure of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time, without affecting processing carried out before withdrawal
To exercise any of these rights, contact us at info@smilee.ai. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Security
We use commercially reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.
Children's privacy
Our service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will remove it.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. We encourage you to review it periodically.
Contact us
If you have any questions about this Privacy Policy, contact us by email at info@smilee.ai.