Privacy Policy

Last updated: July 14, 2026

1. Who We Are

Smooth Flick ("we", "us", "our") provides an AI-powered SaaS platform for workflow automation, telephony, and productivity features available at our primary domain smoothflick.com (also served at our secondary domain smoothflick.org). For any privacy-related queries, contact us at support@smoothflick.com.

2. Information We Collect

We may collect account information (such as name and email), usage and device logs, workflow content you submit, and data from connected third-party services (including Google APIs and the WhatsApp Business Platform / Meta Platforms) that you explicitly authorize. Where you connect WhatsApp, this includes WhatsApp phone numbers, recipient profile names, message content and message metadata, as described in Section 5.

3. How We Use Information

We use data to operate and secure the service, process your requests, provide support, improve product quality, and comply with legal obligations.

4. Google API Services User Data & Limited Use

If you connect Google services, we access only the scopes you approve and use the data only to provide the features you request. We do not sell Google user data and do not use it for advertising.

Scopes we request. For Google Sheets we request only the non-sensitive drive.file scope — access is limited to the individual spreadsheet(s) you explicitly select through the Google Picker (or that our app creates for you). We do not request access to your other Drive files. For Gmail and other Google services, we likewise request only the minimum scopes required for the feature you enable.

AI processing & Limited Use. Some features (for example, AI voice agents and automated workflows) process content using third-party AI inference providers — currently Groq, Inc., which runs open-weight models (such as Llama, Qwen and GPT-OSS) as a hosted inference service. Where Google user data is processed by such a provider, it is used solely to deliver the specific feature you requested and is transmitted only for that purpose. We do not use Google user data — and our AI providers do not use it — to develop, improve, or train generalized or foundation AI/ML models. Google user data is never sold, never used for advertising, and never transferred to others except as needed to provide the feature or as required by law.

Smooth Flick's use and transfer of information received from Google APIs, including any raw or derived user data, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. WhatsApp Business Platform & Meta Tech Provider

Smooth Flick is a Tech Provider on the WhatsApp Business Platform and integrates with the WhatsApp Business Cloud API and other Meta products (collectively, "Meta Platforms") so our business customers can send and receive WhatsApp messages, manage conversations, and run opt-in messaging campaigns.

Our role. When a business connects its WhatsApp Business Account through Smooth Flick, we act as a service provider (data processor) acting on that business's behalf. The business is the controller of its customers' data and is responsible for obtaining any consent required from message recipients.

Information processed. To deliver WhatsApp messaging we process: WhatsApp phone numbers (of the business and of message recipients), recipient display / profile names, message content (text, media, templates, and interactive replies), message metadata (timestamps, delivery and read status, message IDs), and the business's WhatsApp Business Account ID, phone number ID, and access credentials.

How we use it. WhatsApp and Meta data is used solely to provide the messaging features you request — sending and receiving messages, delivering template and broadcast campaigns, routing inbound replies to the business's inbox, and reporting delivery status. We do not use WhatsApp or Meta data for advertising, and we do not sell it.

Sharing with Meta. To send and receive messages, message content and the recipient phone number are transmitted to Meta / WhatsApp through the WhatsApp Business Cloud API. Meta processes this data under its own terms and policies. WhatsApp messages are encrypted in transit by WhatsApp.

Retention & deletion. WhatsApp conversations and messages are retained only as long as needed to provide the service or as required by law. A business may delete conversations, disconnect its WhatsApp Business Account, or request deletion of its WhatsApp data at any time by emailing support@smoothflick.com.

Opt-in and opt-out. Businesses must obtain recipients' opt-in before messaging them and must honour opt-out requests. Recipients can stop receiving messages by replying "STOP" or by contacting the business; we support unsubscribe handling for marketing templates.

Compliance. Our processing of WhatsApp and Meta data complies with the WhatsApp Business Messaging Policy, the Meta Platform Terms, and Meta's Developer Policies. Businesses using Smooth Flick must also comply with these policies and all applicable laws.

6. Data Sharing

We share information only with service providers needed to operate the platform (such as Meta / WhatsApp for message delivery and Google for authorized integrations), affiliates, or when required by law. We do not sell personal information.

7. Data Retention and Deletion

We retain data as long as needed to provide services, meet legal obligations, and resolve disputes. You may request account or data deletion by contacting us.

8. Security

We use reasonable technical and organizational safeguards to protect data. No system is completely secure, but we continuously work to improve protections.

9. Your Choices

You may disconnect third-party integrations (including your WhatsApp Business Account), revoke Google access in your Google account settings, stop WhatsApp messages by replying "STOP", or request access / update / deletion of your information at any time.

10. AI Voice Agent — User Compliance Obligations

Smooth Flick provides AI-powered telephony voice agents for inbound and outbound calling. By using these features, you are solely responsible for complying with all applicable laws and regulations governing AI voice agents, automated calling, and call recording in your jurisdiction and in the jurisdiction of the parties you call.

🇺🇸 United States

TCPA (Telephone Consumer Protection Act): You must not use automated voice agents to call mobile phones without prior express written consent.
Two-party / all-party consent states: States including California, Florida, Illinois, Maryland, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington require consent from all parties before recording. Disclose at the start of every call that an AI agent is handling it.
FTC/TSR: AI voices used in telemarketing must not impersonate humans. Disclosure is mandatory.
Do Not Call (DNC) Registry: You must not call numbers on the National DNC Registry without a proper exemption.
Permitted calling hours (FTC/TCPA): Outbound AI agent calls may only be placed between 8:00 AM and 9:00 PM local time of the called party. Calls outside these hours are prohibited under federal law, and many states apply stricter windows (e.g. some states restrict to 9:00 AM – 8:00 PM).

🇪🇺 European Union / EEA

GDPR Articles 13 & 14: Inform callers at the start that they are interacting with an AI agent and that conversation data is processed. A lawful basis (consent or legitimate interest) is required.
ePrivacy Directive: Automated calling systems require prior subscriber consent in all EU/EEA member states.
EU AI Act (2024): AI systems interacting with persons must clearly disclose their AI nature. High-risk uses may require conformity assessments.
Right to erasure (GDPR Article 17): Recordings and transcripts must be deleted upon request.
Permitted calling hours (EU/EEA): While the EU does not set a single federal calling-hours rule, member-state telemarketing laws generally restrict automated calls to 9:00 AM – 6:00 PM local time on weekdays. Saturday calls are restricted in many states (e.g. Germany: until 1:00 PM); Sunday and public-holiday calls are widely prohibited. Always check the specific rules of each country you call into.

🌍 Other Jurisdictions

Many countries have equivalent laws governing automated calling, AI disclosure, and call recording. Before deploying AI voice agents in India, UK, Canada, Australia, or any other country, you must research and comply with local telecommunications and data protection regulations. We recommend consulting a qualified legal professional in your jurisdiction.

Important: Smooth Flick is a technology platform only. We do not provide legal advice. Compliance with the above laws is entirely your responsibility as the operator deploying the voice agent. Smooth Flick bears no liability for regulatory violations by users.

11. Payment Data

Payments are processed through Razorpay, a PCI-DSS compliant payment gateway. We do not store your full card number, CVV, or bank credentials on our servers. Razorpay may collect and store payment information in accordance with their own privacy policy. By making a payment, you also agree to Razorpay's Privacy Policy. Transaction records (amount, date, subscription tier) are retained for accounting and legal compliance purposes.

12. Contact

For privacy questions, contact Smooth Flick at: support@smoothflick.com