Privacy Policy - Smart Publish Ai

## 1. Introduction

This Privacy Policy („Policy”) describes how personal data is collected, used, and protected in connection with the Smart Publish AI service, available at https://smartpublish.ai and through the Smart Publish AI WordPress plugin installed on the User’s own WordPress website (together, the „Service”).

The Service is operated in accordance with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data („UAE PDPL”) and other applicable data protection laws in the jurisdictions where the Service is offered.

## 2. Data Controller

– **Company name:** Webvezer Media FZE
– **Registered office:** Sharjah, University City, Block B – B47-032, Sharjah, United Arab Emirates
– **Registration number:** 9337
– **E-mail:** info@smartpublish.ai
– **Website:** https://smartpublish.ai

(the „Controller”, „we”, „us”, or „our”)

You may contact us at the above e-mail address with any questions or requests regarding this Policy or your personal data.

## 3. Territorial Scope of the Service

The Service is offered exclusively to customers located in the **United States of America** and in the **member states of the Gulf Cooperation Council (GCC)**: the United Arab Emirates, the Kingdom of Saudi Arabia, Qatar, Kuwait, Bahrain, and Oman.

**The Service is not offered or directed to individuals located in the European Union or the European Economic Area.** We do not intentionally target, market to, or accept registrations from EU/EEA residents. Accordingly, the EU General Data Protection Regulation (GDPR) is not intended to apply to the Service. If we become aware that we have collected personal data from an EU/EEA resident, we will delete such data without undue delay.

## 4. What Data We Collect, Why, and for How Long

### 4.1. Registration and account management

– **Data:** name, e-mail address, password (stored encrypted/hashed), account settings
– **Purpose:** creating and managing your user account, authentication, providing the Service
– **Legal basis:** performance of a contract
– **Retention:** 30 days after account deletion, after which the data is permanently erased (except data we are legally required to retain)

### 4.2. Subscriptions and billing

– **Data:** billing name, billing address, tax ID (for companies), subscription plan, transaction data
– **Purpose:** providing the purchased plan and issuing invoices
– **Legal basis:** performance of a contract; compliance with legal obligations regarding accounting records
– **Retention:** invoicing and accounting records are retained for **8 years** in accordance with applicable accounting regulations
– **Note:** we do not store credit or debit card numbers. Payments are processed by our payment provider, **Stripe, Inc.**, on its own secure infrastructure.

### 4.3. Contact and consultation form

– **Data:** name, e-mail address, phone number, message content
– **Purpose:** responding to your inquiry and scheduling consultations
– **Legal basis:** your consent
– **Retention:** up to 1 year after the inquiry is closed, or until you withdraw your consent

### 4.4. Content created through the Service

– **Data:** topics, keywords, and instructions (prompts) you provide; the generated articles and images; details of your connected WordPress website and Facebook page; access tokens; and technical data transmitted by the WordPress plugin from your website to our servers (website URL, API key, request data required for content generation)
– **Purpose:** providing AI-based content generation and automated publishing
– **Legal basis:** performance of a contract
– **Retention:** for the lifetime of your account, and for 30 days after account deletion

### 4.5. Technical data and logs

– **Data:** IP address, browser and device type, operating system, plugin version, log data, error reports
– **Purpose:** secure and stable operation of the Service, troubleshooting, prevention of abuse and fraud
– **Legal basis:** our legitimate interest in operating the Service securely
– **Retention:** up to 90 days

### 4.6. Marketing (newsletter) — where applicable

– **Data:** name, e-mail address
– **Purpose:** sending newsletters and offers about the Service
– **Legal basis:** your consent, given by an active opt-in (checkbox); you may withdraw it at any time via the unsubscribe link in each e-mail or by writing to info@smartpublish.ai
– **Retention:** until you withdraw your consent

**Important:** the prompts and inputs you provide are transmitted to our AI and research providers (OpenAI, Tavily) for the purpose of content generation. Please do not include sensitive personal data or confidential information about identifiable individuals in your prompts.

## 5. Data Processors and Service Providers

We use the following processors and service providers to operate the Service:

Our processors act only on our instructions, are bound by confidentiality, and may not use your data for their own purposes.

## 6. International Data Transfers

Because our providers operate globally, your data may be transferred to and processed in countries other than your own, including the United States, the European Union, and the United Arab Emirates. In accordance with the UAE PDPL, we only transfer personal data to countries that provide an adequate level of protection, or subject to appropriate contractual safeguards with the recipient.

## 7. Cookies and Analytics

Our website uses:

– **Essential cookies** required for the website to function (including WordPress system cookies and the cookie-consent cookie);
– **Analytics cookies** (Google Analytics) to understand how visitors use the site; and
– **Marketing cookies** (Google Ads, Facebook Pixel) to measure and improve our advertising — only with your consent.

You can manage or withdraw your cookie consent at any time through your browser settings or our cookie banner. For more information, see Google’s privacy policy at https://policies.google.com/privacy and Meta’s privacy policy at https://www.facebook.com/privacy/policy.

## 8. Your Rights

Subject to applicable law (including the UAE PDPL), you have the right to:

1. **Access** — request information about the personal data we hold about you;
2. **Rectification** — request correction of inaccurate or incomplete data;
3. **Erasure** — request deletion of your personal data;
4. **Restriction** — request that we restrict the processing of your data;
5. **Objection** — object to processing based on our legitimate interests;
6. **Data portability** — request transfer of your data to another controller, where technically feasible;
7. **Withdrawal of consent** — withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at **info@smartpublish.ai**. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

## 9. Additional Disclosures for California Residents (CCPA/CPRA)

If you are a California resident, you additionally have the right to know what categories of personal information we collect (identifiers, commercial information, internet activity, and user-generated content, as described in Section 4), the right to access, correct, and delete that information, and the right to non-discrimination for exercising your rights. **We do not sell or share your personal information** within the meaning of the CCPA/CPRA. To exercise your rights, contact us at info@smartpublish.ai.

## 10. Account and Data Deletion

You may delete your account and associated data:

– through the **My Account → Delete Account** function on the website; or
– by e-mailing **info@smartpublish.ai** from the e-mail address registered to your account.

Upon receipt of a deletion request, your account and personal data are permanently erased within 30 days, except for data we are legally required to retain (e.g., invoicing records for 8 years).

## 11. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted data transmission (HTTPS/TLS), hashed password storage, access controls, logging, and regular backups. However, no transmission over the internet can be guaranteed to be absolutely secure; we therefore cannot guarantee absolute protection, but we take all reasonable measures to prevent unauthorized access or misuse.

## 12. Children

The Service is intended for business use by adults. We do not knowingly collect personal data from anyone under the age of 18. If we learn that we have collected data from a minor, we will delete it promptly.

## 13. External Links

The Service may contain links to third-party websites. This Policy does not apply to those websites, and we are not responsible for their privacy practices. Please review the privacy policy of any third-party site you visit.

## 14. Complaints

If you believe your data protection rights have been violated, please contact us first at **info@smartpublish.ai** so we can try to resolve the matter.

You also have the right to lodge a complaint with the competent authority in the United Arab Emirates — the UAE Data Office, through the Telecommunications and Digital Government Regulatory Authority (TDRA): e-mail info@tdra.gov.ae, phone +971 800 12 or +971 4 7774444, address: Al Wuheida St – Al Mamzar – Deira – Dubai – UAE.

California residents may also contact the California Privacy Protection Agency regarding CCPA/CPRA matters.

## 15. Changes to This Policy

We reserve the right to amend this Policy from time to time, for example to reflect changes in law or in the Service. The current version is always available at https://smartpublish.ai. Material changes will be announced on the website or by e-mail. Continued use of the Service after the effective date of an updated Policy constitutes acceptance of the changes.

Effective date: August 1, 2026
Last updated: August 1, 2026