Privacy Policy

At SmartKit (accessible from smartkit.cc), one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by SmartKit and how we use it. If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in SmartKit. This policy is not applicable to any information collected offline or via channels other than this website.

1. Information We Collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

1a. What We Record Across the Website

In addition to any information you actively provide (like an account name or email), SmartKit automatically records certain technical data whenever you use any tool on the site, whether or not you are signed in. This applies site-wide, across every tool including InvoiceKit, AssetTracker, TicketDesk, QueueCare, DailyCopy, TypeSpeed, SpinPick, Live Scoring, Elections, Smart Forms, and others. Depending on the specific tool, this may include:

• IP address - recorded for every visitor, signed in or as a guest, primarily for security and abuse prevention (see Section 3 below).
• Account identity or "Guest" label - if you are signed in, actions are tied to your account name; if you are not, they are recorded against your IP address instead, with no other identifying information collected.
• Timestamps and activity type - when an action happened and what kind of action it was (for example, a form submission, a tool result, a vote, or a saved draw).
• Device and browser information - such as browser type, operating system, and whether you are on mobile or desktop, used to keep the site working correctly across devices.
• Tool-specific result data - such as the names in a Spin Wheel or Giveaway Draw, a typing test score, a poll vote, or a submitted form response, as already described in that tool's dedicated section of this policy.
• Referring and exit pages - which page sent you to SmartKit and which page you left from, used for basic traffic analysis.

We do not sell this data to third parties, and guest activity is never linked back to a real name or email unless you choose to create an account and sign in.

2. How We Use Your Information

We use the information described above in the following ways:

• Security and abuse prevention: IP addresses and activity logs are used to detect and block spam, brute-force attempts, scraping, and other malicious activity, and to enforce rate limits so the tools stay available for everyone. See Section 3 for details on IP-based blocking.
• Improving our website experience: Aggregated, non-identifying usage patterns (which tools are used most, which features are used together, common error points) help us decide what to build next, fix bugs, and streamline the interface. We look at usage trends, not individual behavior, for this purpose.
• Marketing and advertising: We may use aggregated usage and traffic data to understand which tools and content perform well, so we can run more relevant marketing campaigns, write better content, and (where applicable) work with advertising partners like Google AdSense. See Sections 5-6 for how third-party advertising cookies work. We do not sell personally identifying information for marketing purposes, and account activity tied to your identity is not shared with advertisers.
• Providing, operating, and maintaining our website and its tools
• Developing new products, services, features, and functionality
• Communicating with you, either directly or through one of our partners, including for customer service, updates, and other information relating to the website
• Sending you emails regarding your account or tool usage
• Finding and preventing fraud and enforcing our Terms of Use

3. Log Files, IP Logging & Security Blocking

SmartKit follows a standard procedure of using log files and active monitoring systems to protect our infrastructure and users. The information collected by log files and our security systems includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and specific activity paths across the website.

Important Security Note: We actively record IP addresses and monitor user activity across the website to detect abusive behavior, fraud, and violations of our Terms of Use. If an IP address is found to be engaging in malicious activity, we reserve the right to permanently block that IP address from accessing SmartKit to ensure the safety of our platform.

4. Cookies and Web Beacons

Like any other website, SmartKit uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.

5. Google AdSense and Advertising Cookies

SmartKit may use Google AdSense to show advertising on eligible public pages. Google and its advertising partners may use cookies or similar technologies to serve ads based on a visitor's prior visits to SmartKit or other websites.

Visitors can learn how Google uses information from sites that use its services at Google's partner sites policy. Visitors may also manage personalized advertising through Google Ads Settings.

6. Advertising Partners Privacy Policies

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on SmartKit, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that SmartKit has no access to or control over these cookies that are used by third-party advertisers.

7. Temporary Storage & Data Retention

Because SmartKit offers file sharing, format conversion, and other file-based utilities, we employ strict data retention policies. Uploaded files, generated PDFs, and temporary chat logs are automatically deleted from our servers after their intended expiration period (typically a few hours to a few days). We do not backup or permanently store these temporary files. We cannot retrieve files once they have been purged by our automated system.

8. SmartKit Bio Pro Public Pages

SmartKit Bio Pro lets users publish public profile pages that may include display names, short bios, locations, job titles, availability badges, social links, featured links, posts, images, and optional CV files. Information added to a public Bio page is visible to anyone who visits the page. Account owners can edit or remove this content from their Bio dashboard.

9. Peer-to-Peer Architecture & Uncompromisable Privacy

Our real-time communication tools, including StreamFeed, Voice Rooms, Temp Chat, and File Share, are built using advanced WebRTC peer-to-peer technology. This means that when you transmit video or communicate with someone else, the connection is established directly between your device and the receiving device (e.g., your OBS Studio).

Because the data travels directly between devices, it never passes through our servers. Therefore, we do not (and mathematically cannot) record, intercept, hear, or read your private video streams, communications, or shared files. Even the platform developers and server administrators have absolutely no access to this peer-to-peer data.

To operate these services, the server only records minimal metadata necessary to establish the connection and display historical usage statistics. We record the room titles, creation times, the number of participants who joined, basic connection durations, and total download counts. We do not store the actual contents of the conversations or the physical files once they expire.

10. AcademiCard Data Management

The AcademiCard platform allows educational institutions to upload and manage student performance results. By using AcademiCard, uploading institutions acknowledge that they are the primary data controllers for the student information they upload.

SmartKit acts solely as a data processor for AcademiCard. The student result data (including names, registration numbers, dates of birth, and marks) is stored securely on our infrastructure and is strictly accessible only to users who provide the exact matching registration number and date of birth credentials. Institutions have full control over this data and may delete batches or entire school profiles at any time, which permanently removes the associated student data from our active databases.

10a. AssetTracker Data Management

The AssetTracker tool allows companies to manage their own IT devices, employees, project sites, stores, assignments, and movement history. By using AssetTracker, companies acknowledge that they are the primary data controller for the business information they enter.

SmartKit acts solely as a data processor for AssetTracker. Each company's data is stored in its own isolated workspace and is never shared with or visible to other AssetTracker users. Workspace owners have full control over this data and may delete devices, employees, sites, stores, individual workspaces, or their entire AssetTracker account at any time, which permanently removes the associated records.

10a-1. InvoiceKit Billing Data

The InvoiceKit tool lets you create invoices, quotations, receipts, payment records, clients, and item catalogs. All of this billing data is stored inside your own private SmartKit workspace, isolated from other users. You are the data controller for the client and financial information you enter, and SmartKit acts only as a data processor.

SmartKit platform administration can view privacy-safe usage metadata only, such as your business name, workspace owner, document counts, storage usage, and tool health. SmartKit does not view your clients' private financial details, invoice line items, invoice amounts, payment references, bank details, tax ID values, private notes, or full documents by default.

Each invoice you choose to share generates a secure, unguessable public status link. You control these links and can regenerate or disable them at any time. You may delete clients, items, documents, or your entire InvoiceKit workspace at any time, which permanently removes the associated records.

10b. TypeSpeed Typing Test

The TypeSpeed typing test runs entirely within your browser. The text you type during a test is processed locally on your device and is never sent to or stored on our servers.

When a test is completed, SmartKit records only the final result metrics (such as words per minute, accuracy, test mode, device type, language, and duration) together with your account name if you are signed in, or a general "Guest" label and IP address if you are not. This limited information is used solely for aggregate usage statistics and to help prevent abuse. We do not store the actual words you typed.

10c. SpinPick Random Pickers

SpinPick (Spin Wheel, Giveaway Draw, Team Generator, Coin Toss, Dice Roller, List Shuffler, and Random Number Generator) can be used without an account. Participant names, lists, and settings you type or upload are processed in your browser to run the spin, roll, or draw, and are not stored on our servers unless you choose to save a result.

When you save a draw while signed in, SmartKit records the participant and winner names you submitted, together with your account identity or a general "Guest" label and IP address if you are not signed in, for basic usage logging and abuse prevention. Saved draws are visible to the account that created them, and a published Giveaway Draw result page is publicly viewable only if you choose to save and share that link. You may delete your saved draws from your SpinPick history at any time.

10d. CaptionCast Live Captions

Your browser asks permission before CaptionCast can use your microphone. Speech recognition happens using your browser's built-in service; SmartKit does not run its own speech-to-text processing or send your audio to a third-party transcription API. The resulting caption text you speak is sent to our servers only to display it on your session's overlay page and to build your transcript.

Guest caption sessions are not permanently retained beyond the session file itself, which you can clear at any time from the control page. When you create a session while signed in, SmartKit records the session title and transcript text you generate under your account for the "My History" feature, together with your account identity or a general "Guest" label and IP address if you are not signed in, for basic usage logging and abuse prevention.

You may clear a session's transcript or stop captioning at any time from the control page. Anyone with your overlay link can view live captions for that session while it is active; do not share the overlay link publicly if the content being captioned is private.

11. Account Activity and Data Export Requests

When you are signed in, SmartKit may record account activity such as page visits, profile changes, link management actions, file tool usage, privacy export requests, and admin support actions related to your account. This activity log helps us secure accounts, investigate abuse reports, support user requests, and provide a transparent account data export.

Signed-in users can request a copy of their account data from the Request Your Data page. The export is prepared as a structured ZIP archive with JSON files grouped by account, activity, links, forms, file sharing, chat, downloader, timers, Tasbih, live scoring, and elections. To prevent abuse and protect server resources, each account can request up to two exports in a rolling 30-day period, and a new request cannot be made until three days after the previous request.

Data exports are processed in the background. The download link is sent automatically to the registered account email after processing, usually within 30-60 minutes. Export links expire after three days. Users should check their inbox, spam, promotions, or junk folder if the email is not visible.

11. Lawful Requests, Safety, and Compliance

SmartKit respects user privacy, but we may access, preserve, export, or disclose account information, activity records, files, messages, logs, or other stored data when we reasonably believe it is necessary to comply with applicable law, a valid government or law enforcement request, a court order, or a legal process.

We may also review or preserve relevant data to investigate abuse, fraud, security incidents, harmful activity, service misuse, copyright or rights complaints, or violations of our Terms of Use. Where appropriate and legally permitted, we aim to limit disclosures to the information reasonably needed for the specific request or investigation.

12. CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

• Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
• Request that a business delete any personal data about the consumer that a business has collected.
• Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

13. GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access - You have the right to request copies of your personal data.
• The right to rectification - You have the right to request that we correct any information you believe is inaccurate.
• The right to erasure - You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing - You have the right to request that we restrict the processing of your personal data, under certain conditions.

15. AudioKit & ImageKit - Local Processing & Zero Data Collection

AudioKit and ImageKit are advanced media editing tools that operate entirely on your device using WebAssembly and local browser technologies. When you open an audio file or an image in these tools, the file is loaded directly into your browser's local memory. It is never transmitted to SmartKit's servers, never stored on our infrastructure, and never accessible to SmartKit staff at any point during or after your editing session.

Because all processing occurs locally, SmartKit collects zero data about the media files you edit. This includes file names, file contents, file sizes, editing actions, exported output files, and any metadata associated with your media. These tools are completely invisible to our data collection systems by design.

16. Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

SmartKit does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.