Privacy Policy

Last updated: 28 June 2026

This Privacy Policy explains how Smart Agentic Systems ("we," "us," or "our") collects, uses, shares, retains, and protects personal data when you use smartagenticsystems.com (the "Site") and our products and services, including SEAS and the ARED, DVDAI, and DIRAI diagnostics. It is written to meet the requirements of the EU/UK General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable US state privacy laws (including the CCPA/CPRA).

1.Who we are

Smart Agentic Systems is the data controller / data fiduciary responsible for your personal data. For any privacy question, request, or grievance, contact us at [email protected]. This address also serves as our contact point for data-protection and grievance-redressal purposes.

2.The data we collect

• Purchase & billing data — when you buy a product, payment and billing information is collected and processed by our payment provider, Polar (which may act as merchant of record), under its own privacy terms. We receive confirmation of your purchase and limited order details, not your full card data.
• Communications & support — your email address and the contents of any message you send us (for example, pre-sale questions or post-purchase support).
• Diagnostic intake data (DVDAI / DIRAI) — if you purchase a validated diagnostic, the company and financial details you choose to submit to us by email so that we can prepare your report. You may redact or omit anything you consider too sensitive.
• ARED inputs — figures you enter into the automated diagnostic tool are processed in your browser to generate your report and are not transmitted to or stored by us.
• Usage & device data — when you visit the Site we and our analytics provider may collect standard technical data (such as IP address, browser type, pages viewed, and referring source) via cookies and similar technologies.

3.Why we use your data, and our lawful basis

We use personal data to: process and deliver your purchase; prepare and deliver diagnostics you have ordered; provide support and respond to your enquiries; operate, secure, and improve the Site; and comply with our legal obligations. Under the GDPR our lawful bases are performance of a contract (delivering what you bought), your consent (for diagnostic intake data and non-essential cookies), and our legitimate interests (running and securing our business), balanced against your rights. Under the DPDP Act we rely on your consent and applicable legitimate uses. You may withdraw consent at any time (see Section 10); withdrawal does not affect processing already carried out.

5.Cookies and analytics

The Site uses cookies and similar technologies, including Google Analytics (GA4) and conversion measurement, to understand usage and improve the Site. You can control or block cookies through your browser settings, and you can opt out of Google Analytics using Google's opt-out browser add-on. Where required by law, we rely on your consent for non-essential cookies.

6.Who we share data with

We do not sell your personal data. We share it only with service providers who help us operate, and only as needed: our payment provider (Polar), our analytics provider (Google), and our email/hosting infrastructure providers. We may also disclose data where required by law or to protect our legal rights. These providers act under their own terms and applicable data-protection obligations.

7.International data transfers

We operate from India, and our service providers may process data in other countries. Where personal data is transferred across borders, we take steps to ensure it remains protected in accordance with applicable law (for example, appropriate safeguards for transfers of EU/UK data). By using the Site or submitting data to us, you understand your data may be processed in these locations.

8.How long we keep data — retention & deletion

We keep personal data only for as long as necessary for the purposes described above. In particular, financial and company details you submit for a DVDAI or DIRAI diagnostic are retained only as long as needed to prepare and deliver your report, and are deleted afterwards. Purchase records may be kept for as long as required to meet legal, accounting, and tax obligations. Support correspondence is kept only as long as needed to assist you.

9.How we protect data

We apply reasonable security safeguards appropriate to the data we hold, including limiting access and deleting diagnostic data after delivery. No method of transmission or storage is completely secure; in particular, email is not a fully secure channel, so please do not send more sensitive information than necessary, and redact identifiers where you can.

10.Your rights

Depending on where you live, you have rights over your personal data. We honour these rights regardless of your location, to the extent applicable law allows. Contact [email protected] to exercise any of them; we may need to verify your identity first.

• Under the GDPR (EU/UK): access, rectification, erasure, restriction, portability, objection, withdrawing consent, and the right to lodge a complaint with your supervisory authority.
• Under India's DPDP Act, 2023: access to and a summary of your data, correction and erasure, grievance redressal, and the right to nominate another person to exercise your rights. You may raise grievances with us at the contact above before approaching the Data Protection Board.
• Under US state laws (e.g., CCPA/CPRA): to know what we collect, to access and delete it, to opt out of "sale" or "sharing" (note: we do not sell your data), and not to be discriminated against for exercising your rights.

11.Children's data

The Site and our products are intended for business professionals and are not directed to children. We do not knowingly collect personal data from anyone under the age at which consent is required in their jurisdiction. If you believe a child has provided us data, contact us and we will delete it.

12.Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised. Material changes take effect when posted on the Site; your continued use after changes are posted constitutes acceptance of the revised policy.

13.Contact & grievances

For any privacy question, to exercise your rights, or to raise a grievance, contact Smart Agentic Systems at [email protected]. We aim to respond to verified requests within the timeframes required by applicable law.