Privacy Policy

SmartSelect is a service operated in Québec, Canada. To contact SmartSelect’s person in charge of personal information protection, write to support@smartselect.dev.

SmartSelect manages information needed for its own accounts, billing, support, security and operation of the service. We do not sell personal information.

For a buyer request, SmartSelect processes information on behalf of the manufacturer that owns the configurator. The manufacturer chooses the information requested, recipients and commercial follow-up. Its privacy policy also applies to those uses; a link may appear in its form. That link provides information and is not proof of consent.

Accounts and teams: name, email, company and profile information, authentication, invitations, workspace membership and roles. If you choose an identity provider to sign in, we receive information needed for that sign-in.

Creation and management: messages and assistant responses, submitted documents, filenames, photos, addresses and content of websites provided, extracted information, drafts, products, questions, options, rules, visuals, settings and published versions. Recovery data and saved conversations help you resume your work.

Buyer requests: name, email, answers, products and options, configurations and request reference. Depending on the form, phone number, company, quantities, requirements and selected representative may also be collected. One request may contain several separate configurations.

Operations: email delivery and CRM synchronization states, each member’s request read records, billing and subscription data, contact or support messages, and technical security and diagnostic data. Infrastructure may process IP addresses and technical logs; analytics event limits do not apply to all such logs.

This information is used to authenticate users, manage permissions, prepare and adjust configurators, retain saved work, publish the chosen version, receive requests, deliver them to configured recipients and display their status.

It also supports trials and subscriptions, support responses, abuse prevention, diagnostics and understanding service usage. A sales request does not automatically enroll the buyer in a SmartSelect promotional campaign.

When AI is available and you submit a request, necessary information may be sent to OpenAI’s API: your message, supplied document, pages collected from the specified website, extracted data or configurator and conversation context. Only supply information you are authorized to process and avoid sensitive information or secrets unnecessary for the task.

The application requests that responses not be stored as reusable API history. This does not guarantee no retention by OpenAI: security logs and other technical processing may remain under its rules. According to its documentation, API data is not used to train its models by default, unless you explicitly opt into sharing data with that provider.

Adding a photo to the gallery or generating a local PDF thumbnail does not itself trigger AI analysis. Sources, conversations and drafts do not become public merely because they are added. Publication exposes the information and visuals you chose to include in the buyer experience.

OpenAI’s API data handling rules

Requests are accessible to authorized members of the manufacturer’s workspace. Depending on its settings, requests may be emailed to representatives or internal recipients, with systematic copies, and the buyer may receive a confirmation email. Recording and deliveries are tracked separately.

We use Supabase for authentication, database and storage, hosting infrastructure to serve the application, Resend for emails, OpenAI for enabled AI processing, Stripe for subscriptions and PostHog for enabled usage measurement. Stripe processes card information; SmartSelect does not retain your full card number.

If an administrator authorizes an available CRM, including HubSpot, Salesforce, Microsoft Dynamics 365 Sales or Zoho CRM, we process connection authorizations, account identity and necessary metadata. When CRM delivery is enabled, contact details and the configuration dossier may be sent to the chosen CRM; opportunity statuses may be read. A connection in testing may be limited to authentication and reading settings.

Identity, payment and CRM services also have their own privacy rules. Disconnecting a CRM stops SmartSelect’s use of that connection without automatically deleting information already received by the third party. Opening sharing in Gmail, Outlook, SMS or another service places the shared information under that service’s rules.

Session cookies and similar technologies support sign-in, access protection and temporary session recovery. Local or tab-scoped storage also retains preferences and journey identifiers. Blocking or clearing it may interrupt sign-in or prevent recovery of unsaved work.

In offline trade show mode, the browser may store a configurator copy and a request queue, including buyers’ contact details and answers, on the device used. Requests remain local until synchronization is confirmed. Protect the device and wait until the queue is empty before clearing its data. Synchronization may deliver requests to configured email and CRM services.

When collection is enabled, explicit events measure website and manufacturer journey usage: acquisition, actions, creation, clarifications, processing duration, estimated active time, preview, account retention, trial, publication, prepared sharing, edits, help and problem categories. Events use opaque browser or attempt identifiers; signed-in use may be associated with technical user and workspace identifiers. This data is pseudonymous, without a guarantee of anonymity.

These events do not contain messages, documents, filenames, names, emails, buyer answers, private addresses, public link tokens or raw errors. Automatic interaction capture, session recording, heatmaps and automatic exception capture are disabled. Measurement respects Do Not Track, Global Privacy Control and the tool’s recorded opt-out. Collection is disabled in local, development, QA and preview environments.

Public buyer journeys are not sent to PostHog. Limited milestones are recorded within SmartSelect with a random per-tab identifier, without contact details, answers, IP addresses or user agents in those records. Insights provides journey, request and available CRM outcome statistics to authorized members. Requests themselves remain dossiers containing information supplied by buyers.

Exploration without an account relies on a temporary session, currently limited to approximately four hours. This is an access and recovery limit, not a promise to immediately erase all files or logs. For durable retention, check that your work has actually been saved to your account.

Accounts, configurators, saved conversations, images, requests and delivery states are retained according to service, support, security and applicable obligations. The thirty-day recovery period after the trial concerns access to work; its end does not automatically delete that work. Detailed buyer journey records are scheduled for twelve months of retention and periodic cleanup.

An owner or administrator can delete a configurator in the application. This removes its associated service data, including linked requests, and initiates removal of its photos and temporary copies. Failed photo removal may require another attempt. Delivered emails, exports, offline copies and dossiers already sent to CRMs are not erased by that action.

Contact us with requests about your account or information. Some information may need to be retained for legal obligations, billing, security or a dispute; backups may remain according to their retention cycle. We do not promise instant deletion at every recipient.

The service uses authentication, workspace and role access controls, author checks for private conversations and encryption of CRM OAuth tokens stored on the server. Communications with providers use encrypted connections. No service guarantees absolute security.

Depending on hosting, providers and chosen connections, information may be processed or stored outside Quebec, Canada or your country and be subject to laws where processing occurs. This policy does not guarantee exclusively Canadian hosting. We may disclose necessary information when required by law or to protect the service’s rights and security.

Depending on applicable law, you may request access to your information, correction, provision in an available format, deletion or withdrawal of consent, and submit a complaint. We may verify your identity and workspace rights before responding. Legal exceptions may apply; refusing necessary processing may make a feature unavailable.

For a request submitted to a manufacturer, contact that manufacturer first. You may also contact us to identify the appropriate contact. SmartSelect handles requests relating to its own accounts and services through the contact below. You retain the right to contact the competent privacy authority.

SmartSelect examples are fictional and simulate requests. As described in the terms, we may show limited excerpts from an already public configurator in private sales demonstrations or product education. This excludes private conversations, source documents and buyer contact information. A public marketing reference to your company requires separate approval.

We update this policy when our practices change and display the revision date. Material changes are communicated through an appropriate channel; where a new use requires consent, updating this page does not replace that consent.