Smara puts a talking assistant on someone else's website. That means two sets of people matter here: the businesses who install it, and the visitors who end up talking to it. This explains what happens to both.
On this page
Two relationships, with different rules.
You are our customer. We hold your account details and we act on your instructions. In data protection terms you are the controller of your visitors' conversations and we are your processor. You decide what is kept and for how long; we do what you set.
The business running that site decides what happens to that conversation, not us. We hold it on their behalf. If you want it deleted, the fastest route is to ask them, and you can also write to us and we will pass it on and act on it.
| What | Why it exists |
|---|---|
| Your email and name | To have an account and to email you about it. Set when you sign in. |
| Site and API keys | So the avatar knows which business it is answering for. |
| Conversation text | The questions visitors asked and the answers given, so you can see what people want. |
| Minutes used | To bill correctly and to show you your usage. |
| Approximate country | Taken from the network connection, to pick a nearby server and to stop abuse. |
| A random visitor id | Stored in the visitor's browser so a free demo cannot be used repeatedly. It is a random string and identifies nobody. |
For customers, we process account and billing data because we have a contract with you and cannot deliver the service without it.
For visitors' conversations, we process on our customer's instructions. Their own lawful basis governs it, and most rely on legitimate interests in answering their visitors' questions. Where consent is the right basis in your country, the banner on the site collects it before the avatar loads.
We also keep minimal records for security and fraud prevention, which is our own legitimate interest in not being abused.
A short list, and it stays short on purpose.
| Who | What they do |
|---|---|
| Groq | Turns speech into text and generates the reply text. Conversations pass through; they are not used for training. |
| Modal | Runs the servers that render the avatar. |
| Vercel | Serves the website and the widget file. |
| Supabase | Holds accounts and sign-in. |
| Cashfree | Takes payments. Card details go to them, never to us. |
Speech synthesis and the lip movement run on our own servers, so the words your avatar speaks are generated in our infrastructure rather than sent to a third party. If you need the reply generation to stay in your building too, that is what the on-premise option is for.
| What | How long |
|---|---|
| Conversation text | 30 days by default. Adjustable down to zero. |
| Audio | Not kept. Discarded within the request that produced it. |
| Usage totals | As long as the account exists, then 7 years for tax records, without the conversations attached. |
| Account details | Until you close the account, then 30 days. |
| Server logs | 14 days. |
Wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop processing it, and ask for it in a portable format. If you are in the UK or the EU these are rights under the GDPR; if you are in India they are rights under the DPDP Act; if you are in California they are rights under the CCPA. We apply the same process to everyone rather than sorting people by passport.
Write to privacy@smaralive.com. We reply within 30 days. We will not charge you and we will not make you explain why.
If you think we have handled this badly you can complain to your data protection authority. In India that is the Data Protection Board; in the EU it is your national authority; in the UK it is the ICO. We would rather you told us first so we can fix it.
Smara is sold to businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has used an avatar and left personal details, write to us and we will delete it.
If you find a security problem, write to security@smaralive.com. We will not take action against anyone who reports something in good faith.
If we change something that matters, we will email account holders before it takes effect rather than quietly editing this page. The date at the top always reflects the current version.
Smara Intelligence Pvt Ltd, India. Privacy questions to privacy@smaralive.com. Anything else to hello@smaralive.com.