Privacy Policy

Effective Date: [16/10/2026]

1. Introduction

This Privacy Policy explains how GTSmartAI collects, uses, shares, protects, and retains personal information when you visit our website or use our AI-powered services. Our platform may include AI chat, writing, image and video generation, code assistance, research, document analysis, translation, voice and audio tools, automation, agents, chatbots, integrations, subscriptions, and team workspaces. The specific features and providers available to you depend on your plan and configuration.

2. Information We Collect

Account and contact details: name, email address, login information, business name, and information you provide when registering or contacting support.

Subscription and payment details: purchased plan, billing status, transaction references, invoices, and limited payment information supplied by payment providers. Payment-card data may be handled directly by an independent processor rather than GTSmartAI.

Content you submit: prompts, text, images, documents, audio, videos, files, chatbot interactions, and other inputs required to generate or analyze content. Outputs and interaction history may also be stored when the selected feature supports them.

Usage and technical data: IP address, browser and device details, log records, feature usage, credits consumed, security events, and cookie or analytics information.

Team and integration data: workspace membership, permissions, connected-service information, and data you elect to share through enabled third-party integrations.

3. Why We Use Information

We use information as necessary to operate and improve the platform; create and authenticate accounts; deliver AI responses and other requested services; track credits and subscriptions; process billing; provide customer support; protect systems and users against misuse; comply with lawful obligations; analyze service performance; and send important service notices. Promotional communications are sent only on an appropriate legal basis and may be opted out of where required.

4. Legal Bases for Processing

Where applicable data-protection law requires a legal basis, processing may rely on contractual necessity, a legal obligation, consent, or legitimate interests balanced against individual rights, as appropriate. Different activities may rely on different bases. We will request separate consent where required, including for certain optional marketing or tracking activities.

5. AI Providers and How Content Is Processed

To deliver certain features, information you submit may be transmitted to a selected AI-model or infrastructure provider. These providers may process inputs and outputs under their own technical settings and contractual terms. Provider retention and possible use for model improvement vary by service and configuration. Please avoid sharing unnecessary confidential, financial, medical, identity, or third-party personal information in prompts. Where business customers process data about others, they are responsible for securing an appropriate lawful basis and providing required notices.

6. Sharing and Disclosure

We may share necessary information with authorized hosting and infrastructure services, AI providers, payment processors, analytics or security vendors, customer-support providers, and integration partners. We may disclose information to regulators, law enforcement, or other parties when lawfully required or reasonably necessary to protect rights and security. We do not describe information as never being shared when third-party processing is essential to the chosen feature.

7. Cookies and Similar Technologies

We may use essential cookies for sign-in, security, and basic functionality, along with optional preference, analytics, or marketing technologies where implemented. You can manage browser cookies and any available cookie-consent controls. Disabling essential cookies may impair parts of the service. A separate Cookie Policy or cookie notice may provide further detail.

8. Retention and Account Deletion

We retain data for as long as reasonably necessary to provide selected services, maintain account history and usage records, resolve disputes, meet legal obligations, and protect platform security. Retention may differ for prompts, files, payment records, backups, support requests, and logs. You can request account or personal-data deletion by contacting [email protected], subject to legal retention requirements and valid exceptions.

9. Security

We use reasonable organizational and technical measures intended to reduce unauthorized access, loss, disclosure, or alteration of information. Available measures may include authentication, access controls, monitoring, and protective infrastructure. No electronic platform can guarantee absolute security. Please keep your credentials confidential and alert us promptly if you suspect misuse.

10. International Data Transfers

Our platform may rely on global cloud, payment, and AI providers; therefore, information may be processed outside your country. When applicable law requires safeguards for international transfers, we will use an appropriate legal mechanism or other lawful basis. Relevant country-specific rights remain available where applicable.

11. Your Privacy Rights

Depending on your location and the applicable law, you may have rights to be informed, access personal data, correct inaccurate information, request deletion or portability, object to certain uses, withdraw consent, or seek review of qualifying automated decisions. To exercise your rights, contact [email protected]. We may need to verify your request and may lawfully decline or limit some requests. You may also complain to the relevant data-protection authority, including the Nigeria Data Protection Commission where applicable.

12. Children’s Privacy

GTSmartAI is not intended for individuals who cannot lawfully use the services or provide the required authorization. We do not knowingly seek children’s personal data in violation of applicable law. Parents or guardians who believe a child has provided personal information without appropriate authorization may contact us for review.

13. Third-Party Sites and Changes

Third-party websites and connected services operate under their own privacy terms. We may update this notice to reflect new tools, vendors, legal requirements, or data practices. Material revisions will be communicated when required, and the revised effective date will appear above.