Privacy Policy

This Privacy Policy explains how Shah Corporation Limited ("Company", "we", "us", or "our") collects, uses, shares, and protects personal data when you use the smry.me service ("Service").

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller Details:

• Company Name: Shah Corporation Limited
• Registered Address: Irish Square, Upper Denbigh Road, St Asaph, Denbighshire, LL17 0RN
• Company Number: 08117456
• ICO Registration: We are registered with the Information Commissioner's Office (ICO)
• Contact Email: [email protected]

2.1 Account Data

When you register for the Service, we collect:

• Name
• Email address
• Password (encrypted)
• Account preferences and settings

2.2 Payment Data

When you subscribe to a paid plan, our payment processor (Stripe) collects:

• Payment card details
• Billing address
• Transaction history

2.3 Usage Data

We automatically collect information about how you use the Service:

• Pages visited and features used
• Button clicks and interactions
• Browser type and version
• Device type and operating system
• IP address
• Referring URLs
• Date and time of access

2.4 Website Visitor Data

When website visitors interact with the smry.me embed on your site, we collect:

• Page URL being summarised
• Browser and device information
• IP address (anonymised for analytics)
• Interaction data (impressions, clicks)

2.5 Content Data

To provide the Service, we process:

• Webpage content submitted for summarisation
• AI-generated summaries and insights
• Any edits you make to summaries

2.6 Communications Data

When you contact us, we collect:

• Email correspondence
• Support ticket content
• Feedback and survey responses

We use your personal data for the following purposes:

3.1 Service Provision

• Creating and managing your account
• Processing payments and subscriptions
• Generating AI-powered summaries
• Providing customer support
• Sending service-related communications

3.2 Service Improvement

• Analysing usage patterns and trends
• Improving AI model performance
• Developing new features
• Fixing bugs and technical issues

3.3 Analytics and Insights

• Understanding how the Service is used
• Measuring feature effectiveness
• Creating aggregated, anonymised statistics

3.4 Marketing and Communications

• Sending promotional emails (with consent)
• Displaying relevant advertisements
• Personalising your experience

3.5 Legal and Safety

• Complying with legal obligations
• Enforcing our Terms and Conditions
• Protecting against fraud and abuse
• Responding to legal requests

4.1 Artificial Intelligence Services

We use third-party AI services to generate summaries. When you use the Service:

• Webpage content is sent to AI providers (including Google Gemini) for processing
• AI providers may process this data on servers located outside the UK
• We have appropriate data processing agreements in place
• AI providers may use data to improve their models (subject to their privacy policies)

4.2 Infrastructure Providers

We use the following infrastructure services:

• Cloudflare: Content delivery, security, and edge computing
• Hosting Providers: Server infrastructure and data storage

4.3 Payment Processing

• Stripe: Processes all payment transactions securely

4.4 Analytics Services

We use analytics services to understand Service usage:

• Cloudflare Analytics: Traffic and performance analytics
• Google Analytics: Website usage analytics (where applicable)
• Other analytics tools as implemented

4.5 Advertising

We may display advertisements through:

• Third-party advertising networks
• Programmatic advertising platforms

4.6 Communication Services

• Email Service Providers: For transactional and marketing emails
• Customer Support Tools: For managing support requests

We may share your personal data with:

5.1 Service Providers

Third parties who help us operate the Service, including:

• Cloud hosting providers
• Payment processors
• Analytics providers
• AI service providers
• Email service providers
• Advertising partners

5.2 Business Transfers

In connection with any merger, acquisition, reorganisation, or sale of assets, your data may be transferred to the acquiring entity.

5.3 Legal Requirements

We may disclose data:

• To comply with legal obligations
• In response to lawful requests from public authorities
• To protect our rights, privacy, safety, or property
• To enforce our Terms and Conditions

5.4 With Your Consent

We may share data for other purposes with your explicit consent.

5.5 Aggregated Data

We may share aggregated, anonymised data that cannot identify you for any purpose.

Your data may be transferred to and processed in countries outside the UK, including:

• United States (AI providers, infrastructure)
• European Economic Area
• Other countries where our service providers operate

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Binding Corporate Rules where applicable

We retain your data for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

• Account Data: Until account deletion, plus 7 years for legal/tax purposes
• Payment Data: As required by financial regulations (typically 7 years)
• Usage Data: Up to 26 months for analytics purposes
• Content Data: Until you delete it or close your account
• Support Communications: Up to 3 years after resolution

Under UK GDPR, you have the following rights:

8.1 Right of Access

Request a copy of the personal data we hold about you.

8.2 Right to Rectification

Request correction of inaccurate or incomplete data.

8.3 Right to Erasure

Request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

Request that we limit how we use your data.

8.5 Right to Data Portability

Request your data in a machine-readable format.

8.6 Right to Object

Object to processing based on legitimate interests or for marketing purposes.

8.7 Rights Related to Automated Decision-Making

Request human review of automated decisions that significantly affect you.

8.8 Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at [email protected]. We will respond within one month.

We may need to verify your identity before processing requests. In some cases, we may be unable to comply due to legal obligations or legitimate interests.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites.

9.2 Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how the Service is used
• Advertising Cookies: Used by advertising partners to show relevant ads
• Preference Cookies: Remember your settings and preferences

9.3 Third-Party Cookies

Our partners may set cookies for:

• Analytics and performance measurement
• Advertising and retargeting
• Social media integration

9.4 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• Access controls and authentication
• Regular security assessments
• Employee training

The Service is not intended for children under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

If you embed the Service on your website, you are responsible for:

• Providing appropriate privacy notices to your visitors
• Obtaining necessary consents for cookies and tracking
• Ensuring you have a lawful basis to use the Service
• Responding to data subject requests from your visitors
• Complying with applicable data protection laws

We may update this Privacy Policy at any time. Material changes will be notified via:

• Email to your registered address
• Prominent notice on the Service