Privacy Policy & Terms | smilemap.io Legal

Smile Map is operated as a joint venture between The Gemist Hub (ABN 60 546 912 543) and Vero Scale (ABN 95 987 726 537) (together "we", "us", "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information on our public website at smilemap.io. We are committed to protecting your privacy in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and, where it applies, the General Data Protection Regulation (GDPR). Our policy for the Smile Map app at app.smilemap.io is at https://app.smilemap.io/privacy.

1. Information We Collect

This policy covers our public website at smilemap.io. Most people who visit it never give us anything at all. We collect:

Messages you send us: if you use the contact form, the message itself, the reason you chose, and your email address if you choose to give one. You can send a message without an email address.
An abuse-prevention key: to stop the contact form being flooded, we combine your IP address and browser user agent and store only a short one-way hash of them. We do not store the IP address or the user agent themselves, so an anonymous message stays anonymous even in our abuse records.
Aggregate site-usage information: if you accept analytics cookies, which pages were viewed, roughly how long for, and how people move through the site. See Cookies & Analytics below.
Technical connection information: your IP address and the browser and device information normally sent with a web request, such as browser type, operating system, screen size, and language. Our hosting and security providers receive this whenever you connect, as any web host does.

2. How We Use Your Information

We use this information to reply when you write to us, to keep the site working and protected from abuse, and to understand in aggregate which pages are useful. We do not sell your personal information, and nothing collected here is used for advertising.

3. Cookies & Analytics

The analytics on this website can set cookies or similar storage in your browser. You choose whether they run in the cookie banner.

The cookie banner. On your first visit you are asked to accept or decline non-essential analytics. PostHog and Microsoft Clarity run only if you accept; decline and their scripts are never requested, so those providers are never contacted. Google Analytics loads on every visit and follows your answer: decline and it is instructed not to write or read analytics cookies. The site works fully either way. Your answer is kept in one first-party cookie, `smilemap-cookie-consent`, so we do not ask again.

Google Analytics 4. Measures aggregate site usage and may set first-party analytics cookies. Advertising storage and ad personalisation are switched off. For visitors in the EEA and the UK, analytics storage stays off until you accept. Elsewhere it is on from your first page view until you decline.

Microsoft Clarity. Shows us in aggregate how pages are used, including recordings of how visitors interact with the site. Clarity runs only after you accept analytics cookies.

PostHog. Product analytics for the public site, held back behind the same choice.

Sentry. Scrubbed error reports, so we can diagnose a page that fails. This is part of keeping the site working rather than an analytics choice.

Changing your mind. Clearing the `smilemap-cookie-consent` cookie for smilemap.io in your browser settings brings the banner back, and you can answer differently.

A separate choice from the app. This cookie is set for smilemap.io only and does not apply to app.smilemap.io. The app uses no analytics cookies and stores no analytics identifier on your device, and it has its own switch under Settings, so declining here does not change anything in the app. The app’s policy is at https://app.smilemap.io/privacy.

4. Service Providers & Disclosure

We share data only with providers that process it on our behalf to operate this website, under agreements that limit their use of it:

Cloudflare: hosting, content delivery, and protection against abuse.
Convex: stores contact messages.
Resend: sends our emails, such as passing your contact message to our team and waitlist emails.
Google Analytics 4, PostHog, and Microsoft Clarity: analytics, and only after you accept analytics cookies.
Sentry: error monitoring.

These providers may process or store information outside Australia, including in the United States and other locations where they operate. We take reasonable steps to use providers with appropriate privacy and security safeguards. We do not sell your personal information. We may disclose information where required by law or to protect our legal rights.

5. Artist Portfolios

An artist’s public portfolio at app.smilemap.io/p/ is part of the Smile Map app, not this website. How visits to a portfolio are counted, and how to stop your visit being counted, is set out in the app’s policy at https://app.smilemap.io/privacy#portfolio-visitors.

6. Data Retention

We keep a contact message for as long as we need it to answer you and to keep a record of what was asked. Information held by Google, PostHog, Microsoft, and Sentry is retained according to the settings configured with each provider and only for as long as reasonably needed. You can ask us to delete information we hold about you at the address in Contact Us below.

7. Your Rights

Under the Australian Privacy Principles you may ask what personal information we hold about you and ask us to correct it. Where the GDPR applies, analytics on this website run on your consent: you can decline in the banner, withdraw at any time by clearing the `smilemap-cookie-consent` cookie and answering again, and ask us to delete information we hold about you. Contact us at legal@smilemap.io.

8. Affiliate Program

For invited Affiliates, we also process account identity and email, country and tax residence, ABN and GST status where applicable, an affiliate code, referral and financial records, agreement-acceptance evidence, a safe payout-provider reference, and limited fraud or security information. We do not store free-form bank, BSB, or IBAN details in ordinary app records. The Affiliate Privacy Notice at https://smilemap.io/affiliate-privacy explains this processing and the providers involved.

9. Data Security

We take reasonable technical and organisational measures to protect your information against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to it.

10. Children’s Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. When we make a material change, we tell signed-in artists inside Smile Map.

12. Contact Us

For privacy-related enquiries, contact us at legal@smilemap.io. Smile Map: a joint venture of The Gemist Hub (ABN 60 546 912 543) and Vero Scale (ABN 95 987 726 537) · New South Wales, Australia.