Privacy Policy

1. Who we are

Smart Copy is developed and operated by HAMMI Studio, registered in the Netherlands (KVK: [KVK NUMBER], [STREET ADDRESS, CITY, POSTCODE]). For questions about this policy, contact us at aron@hammi.studio.

2. What data we process

Email threads you select. When you send an email to Smart Copy, the content is transmitted to our server for processing by a large language model. This may contain personal data such as names, email addresses, job titles, company names, or financial figures, depending on what you send.

Extracted field values. The structured output (e.g. client name, fee, venue) returned by the model is stored locally in your browser using Chrome's storage.local API. This data does not leave your device except as part of the extraction request described above.

Account data (when login is enabled). If you create an account, we collect your email address and a hashed password. We use this to authenticate you and to gate access to paid features. We do not sell or share your account details with third parties.

Usage analytics (planned). We intend to integrate analytics tools (such as PostHog or Google Analytics) to understand how the extension is used in aggregate — for example, how often extractions are triggered or how many fields are configured. Where implemented, this data is anonymised or pseudonymised and is not linked to the content of your extractions. We will update this policy and notify users before enabling any analytics collection.

3. How your data is used

• Email content is transmitted solely to perform the extraction you requested. It is not stored on our servers beyond the duration of the API request.
• We do not use your email content, extracted fields, or browsing activity to train models, build profiles, or serve advertising.
• Account data is used only for authentication and subscription management.
• Aggregate, anonymised usage statistics (when collected) are used to improve the product.

4. Data transmission and security

All data transmitted between the extension and our servers is sent over HTTPS. We do not log request bodies containing your email content. Our infrastructure providers may retain standard server access logs (IP address, timestamp, request size) for operational and security purposes.

5. Data retention

• Email content: not retained after the extraction request completes.
• Locally stored field values and settings: stored in your browser until you clear extension data or uninstall Smart Copy.
• Account data: retained for the lifetime of your account. You may request deletion at any time by contacting us.
• Analytics data (when enabled): subject to the retention policies of the third-party analytics provider. We will specify this once a provider is chosen.

6. Data sharing

We do not sell your data. We share data only in the following limited circumstances:

• Scaleway (AI inference): your email content is sent to Scaleway SAS (Paris, France) to run the language model that performs the extraction. Scaleway does not retain prompt data after inference completes. See Scaleway's privacy policy for details.
• Analytics providers (planned): anonymised usage data may be shared with PostHog, Google Analytics, or a similar service.
• Legal obligations: we may disclose data if required by law or to protect our legal rights.
• Business transfers: in the event of a merger or acquisition, your data may transfer to a successor entity under the same terms.

7. Your rights (AVG / GDPR)

HAMMI Studio is subject to the Dutch implementation of the GDPR (Algemene verordening gegevensbescherming, AVG). You have the right to access, rectify, erase, restrict processing of, or port your personal data. You also have the right to object to processing and to lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

To exercise any of these rights, contact us at aron@hammi.studio. We will respond within 30 days.

8. Legal basis for processing (GDPR)

• Email content: processed on the basis of your explicit request (performance of a contract / legitimate interest in providing the service).
• Account data: processed on the basis of contract performance and, where required, consent.
• Analytics (when enabled): processed on the basis of legitimate interest or consent, depending on the tool and data type.

9. Children

Smart Copy is not directed at children under 16 (the age threshold under Dutch law). We do not knowingly collect personal data from children.

10. Changes to this policy

We will update this page when our data practices change. For material changes — such as enabling analytics or introducing new data sharing arrangements — we will notify users via the extension or by email if an account is associated.