Updated: · jCube Web SRL
Controller
Smatick is operated by jCube Web SRL, Student Alley 2/2, Chișinău, Republic of Moldova. Contact: [email protected]. We are controller for our website, accounts, billing and own support. For customer-company chats, the company is controller and Smatick processes data on its instructions.
Data and purposes
We process account and contact details, workspace membership, subscription and payment records, messages, attachments, knowledge sources, tickets, session identifiers and consent evidence. Server requests include IP address, browser, time and errors for operation and security. Optional analytics processes visit data only with permission.
Legal grounds
Accounts and services rely on contract or steps at your request (GDPR 6(1)(b)); security and troubleshooting on legitimate interests (6(1)(f)); required accounting on legal obligation (6(1)(c)); optional analytics and processing described in chat consent on consent (6(1)(a)). The customer company determines grounds for its own chats.
Chat, AI and integrations
Messages and relevant conversation or knowledge context go to the selected AI provider, OpenAI or Anthropic. Previously provided contacts may be used for replies and leads. Leads remain in Smatick tickets and also go to a connected CRM. MCP tools and messengers receive data needed for requested actions. Chat consent is separate from analytics and marketing.
Recipients and transfers
Hosting is provided by Hetzner in Germany. Authorized workspace users access their workspace data. jCube Web SRL is in Moldova. AI providers and optional Google Analytics may process data outside the EEA. German hosting does not mean all processing stays in the EU. Contact us for applicable provider contracts, processing locations and transfer safeguards.
Retention
Account and workspace data remain while used to provide the service. Conversations, contacts, tickets and knowledge remain until administrator deletion or a valid erasure request; conversations currently have no automatic age-based expiry. Consent evidence is kept with the related chat. Accounting, claims and security records remain for the relevant legal obligation or investigation. Third-party copies require separate deletion. Cookie durations are in the cookie policy.
Rights and human review
Where GDPR applies, request access, correction, erasure, restriction, portability or object to processing. Withdraw analytics consent in Cookie settings and chat consent by contacting us or the company hosting the chat. Withdrawal does not affect earlier lawful processing. Ask the operator for human review of AI responses or actions. You can complain to a competent supervisory authority. Analytics consent is never required to browse or chat; a company may require contacts to handle a chat request.
Privacy contact: [email protected]