LEGAL

Privacy Policy

Effective June 25, 2026

This Privacy Policy explains how ConAIs (“ConAIs”, “Smart41”, “we”) collects and uses personal data when you use our websites, the Nova desktop application and related services (the “Services”). We are the data controller for the data described here. Our Services are EU-hosted and built to be GDPR- and EU AI Act–ready.

1. Data we collect

Account data — name, work email, phone number, industry and password (stored hashed).
Billing data — processed by Stripe; we do not store full card details.
Usage and operational data — the content you create and approve, connected-account metadata, and audit logs of decisions (SHA-256 hashed).
Marketing preferences — whether you opted in to product and marketing emails.

2. How we use data

We use personal data to provide and operate the Services, process payments, secure accounts, comply with legal obligations, and—only where you have opted in—send product and marketing emails. We process the content you approve solely to deliver the outbound you direct.

3. Legal bases

We rely on performance of our contract with you (providing the Services), our legitimate interests (securing and improving the Services), your consent (marketing email and certain cookies), and compliance with legal obligations.

4. Sharing and sub-processors

We share data with service providers acting on our behalf—for example Stripe (payments), email and cloud-hosting providers, and the AI model providers used to generate content. These act under data-processing agreements and only as needed to provide the Services. We do not sell your personal data.

5. International transfers

The Services are EU-hosted. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

We keep personal data for as long as your account is active and as required for legal, accounting and audit purposes. Audit and compliance records may be retained for up to seven years.

7. Your rights

Subject to applicable law you have the right to access, correct, export and erase your data, to object to or restrict processing, and to withdraw consent at any time. A GDPR Art. 17 erasure request clears a contact across every channel, typically within one hour. You can unsubscribe from marketing emails using the link in any such email.

8. Cookies

We use only the cookies necessary to operate the site and, where applicable, optional analytics. You can control non-essential cookies through your browser settings.

9. Contact and complaints

To exercise your rights or ask a question, contact us via the contact page or at privacy@conais.com. You also have the right to lodge a complaint with your local data-protection authority.