Smile

Privacy Notice

Last updated: 12 October 2026

Aura microretail technologies PC. ("we") operates Smile PDF and is the data controller for the personal data described here.

Your documents

PDF and document processing happens entirely in your browser. Your files are never uploaded to or stored on our servers. If you choose Cloud mode in AI Summary or AI Translate, the extracted text is sent once to our AI provider for processing and is not stored.

Data we collect and why

  • Account data (name, email, sign-in identifiers) — to create your account and provide the Service. Legal basis: contract.
  • Plan and access records (plan, purchase status, expiry) — to unlock paid features. Legal basis: contract.
  • Tool usage checks (tool ID and file size only, never contents) — to enforce plan limits. Legal basis: contract.
  • Business enquiries (company name, message) — to respond to you. Legal basis: legitimate interests / pre-contract steps.
  • Technical data (IP address, device and browser info, logs) — for security, fraud prevention and reliability. Legal basis: legitimate interests.
  • Advertising cookies (Google AdSense) — to show ads where enabled. Legal basis: consent where required.

Who we share data with

  • Service providers: hosting, database/authentication, AI processing and advertising (Google).
  • Paddle.com, our Merchant of Record, for sales, subscription management, payments, tax compliance and invoicing.
  • Professional advisers (legal, accounting).
  • Authorities where required by law.

International transfers

Some providers may process data outside the EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.

Retention

We keep account data while your account is active and access records as long as needed for the plan and for legal, tax and accounting obligations. Data is then deleted or anonymised.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your data, and to withdraw consent at any time. You may complain to the Hellenic Data Protection Authority or your local supervisory authority. We respond to requests within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls.

Cookies

We use essential cookies/local storage for sign-in, and advertising cookies from Google AdSense. You can manage cookies in your browser settings and via Google's ad settings.