Security and Trust

Last Updated: September 10, 2026

Smoov It, Inc. (“Smoov”) builds relationship infrastructure for businesses.

Protecting customer and participant information is fundamental to how we operate the Services.

This page provides a high-level overview of Smoov’s security and data-handling practices. It is not a complete description of Smoov’s systems, vendors, or internal controls.

Security Overview

Smoov uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, acquisition, alteration, disclosure, or destruction.

Those safeguards include encryption of data in transit and at rest, authentication and access controls, and restrictions designed to limit access to authorized use.

No technical system can eliminate all security risk. Smoov reviews and updates its practices as the Services develop.

Customer Information

Confidential information a customer provides to Smoov remains that customer’s confidential information.

Smoov does not make one customer’s confidential business information available to unrelated customers.

Certain workflows may require limited information to be shared with authorized participants in order to fulfill a customer request. That does not give those participants, or unrelated customers, access to the customer’s underlying confidential records.

Service Providers

Smoov uses third-party service providers to operate portions of the Services, including hosting, communications, payments, and related operational functions.

Smoov does not publish a public list of specific vendors. Where a provider processes Customer Personal Data on Smoov’s behalf, that processing is subject to contractual and data-protection requirements appropriate to the function performed.

Business customers may request additional information about relevant providers as described on the Subprocessors and Service Providers page and in any applicable Data Processing Addendum.

Smoov seeks to limit information provided to service providers to what is reasonably necessary for the function being performed.

Retention and Deletion

Smoov retains information for periods reasonably necessary to provide the Services, fulfill operational or security purposes, comply with legal obligations, resolve disputes, and enforce applicable agreements.

Following a valid deletion request, applicable information may be deleted from active systems, subject to limited legal, security, backup, or dispute-related retention.

Security Incidents

Smoov maintains processes designed to investigate, contain, remediate, and respond to confirmed unauthorized access to information.

Where a security incident affects Customer Personal Data, Smoov will provide notifications required by applicable law and applicable contractual obligations.

Privacy

Smoov’s processing of personal information is described in the Privacy Policy.

Where Smoov processes Customer Personal Data on behalf of a business customer, the Data Processing Addendum may also apply.

Smoov does not sell personal information. Smoov does not share personal information for cross-context behavioral advertising.