1. Who we are
SmartTec, Inc., a Delaware corporation with its principal place of business in Tulsa, Oklahoma, United States, is the controller of personal information collected through smarttec.dev. Contact us at hello@smarttec.dev.
2. What we collect
2.1 Information you give us
- —Contact form — your name, email address, company, stated power requirement, and the message you write.
- —Scoping tool (/design/scope) — the technical inputs you enter about your site, plus your name, company, email, and optional phone number if you choose to submit the result. Your inputs stay in your browser unless you press submit; nothing is transmitted while you are answering questions.
- —Email correspondence — anything you send us directly, including any attachments.
- —Investor data room (/invest) — the access credential you enter, and a session cookie recording that access was granted.
2.2 Information collected automatically
- —Server and edge logs generated by our hosting provider, which may include IP address, user agent, requested URL, referrer, and timestamp. These are used for security, abuse prevention, and diagnosing faults.
- —A strictly necessary cookie set only if you authenticate to the investor data room. It contains an HMAC-signed access token and no personal information. It is the only cookie this site sets.
2.3 What we do not collect
We do not run Google Analytics, Meta pixels, advertising tags, session recording, heatmapping, fingerprinting, or any behavioural analytics package. We do not build advertising profiles. We do not track you across other websites. We do not buy personal information from data brokers.
3. Why we use it, and our legal bases
- —To respond to your enquiry and to prepare a scoping response — necessary to take steps at your request before entering a contract, and our legitimate interest in operating a business.
- —To keep the Site secure and prevent abuse — our legitimate interest in protecting our systems and users.
- —To control access to the investor data room — necessary for the performance of our confidentiality arrangements and our legitimate interest in restricting non-public material.
- —To meet legal, regulatory, tax, and record-keeping obligations — compliance with a legal obligation.
We do not use your information for automated decision-making that produces legal or similarly significant effects about you. The scoping tool performs arithmetic on values you supply; it does not profile you.
4. Who processes it for us
We keep our processor list deliberately short. Each of the following acts on our instructions under a data processing agreement:
- —Vercel Inc. — hosting, content delivery, and server logging.
- —Brevo (Sendinblue) — transactional email delivery for form submissions.
- —ImprovMX — inbound email forwarding for addresses at our domain.
- —Google Workspace — our business email, where your correspondence is received and stored.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We may disclose information where required by law, court order, or lawful request from public authorities, to establish or defend legal claims, or to a successor entity in connection with a merger, acquisition, or sale of assets — in which case we will require the recipient to honour this policy.
5. International transfers
We are based in the United States and our processors may store or process information in the United States and elsewhere. Where personal information is transferred out of the United Kingdom or European Economic Area, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum as applicable.
6. How long we keep it
- —Enquiry and scoping submissions — for as long as needed to respond and to maintain a record of the commercial discussion, and then up to 24 months from last contact, unless a contract or legal obligation requires longer.
- —Email correspondence — under our ordinary business retention practices.
- —Server logs — retained by our hosting provider for a limited period under its standard retention schedule, typically no more than 30 days.
- —Investor access cookie — expires with the session or on its stated expiry, whichever is sooner.
7. Security
The Site is served over HTTPS. The investor area is protected by a shared credential and an HMAC-signed cookie. Access to submitted information is limited to personnel who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Do not send us sensitive personal information — health data, government identifiers, payment card numbers, or financial account details — through the Site. We do not request it and do not need it.
8. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, and other US states with comprehensive privacy laws may also have the right to opt out of sale or sharing and of targeted advertising — we do none of these, so there is nothing to opt out of.
To exercise any right, email hello@smarttec.dev. We will respond within the period required by applicable law, generally 30 days for UK and EU requests and 45 days for US state law requests. We will not discriminate against you for exercising a right. You may use an authorized agent where the law permits; we may ask for proof of authority. If you are in the UK or EEA and are unsatisfied with our response, you may complain to your supervisory authority.
9. Children
The Site is a business-to-business site and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe we have, contact us and we will delete it promptly.
10. Third-party links
The Site links to third-party sites and aggregates third-party news headlines. Those sites have their own privacy practices, which we do not control and are not responsible for. Review their policies before providing information to them.
11. Changes
We may update this policy by posting a revised version here with a new effective date. Where changes are material, we will take reasonable steps to bring them to your attention.
12. Contact
Privacy enquiries: hello@smarttec.dev, or write to SmartTec, Inc., Tulsa, Oklahoma, United States.