Terms, privacy, and security.

Terms of service

These terms govern your access to and use of the SmixAI platform and related professional services ("Services"). By using the Services, you agree to these terms.

1. The service

SmixAI connects to enterprise systems you authorize, analyzes configuration and metadata to produce grounded findings, and provides tooling to plan and operate AI-driven transformation.

2. Accounts & access

You are responsible for the accuracy of account information and for safeguarding credentials and connection authorizations. You must promptly notify us of any unauthorized use.

3. Acceptable use

You agree not to misuse the Services, including attempting to access another tenant's data, reverse-engineer the platform, or use outputs to violate applicable law or third-party rights.

4. Customer data & connected systems

You retain all rights to your data. You grant us a limited license to process connection metadata and findings solely to provide the Services. Record-level data remains in the source system and is accessed under the permissions you configure.

5. Fees

Paid plans and professional-services engagements are billed per the applicable order or statement of work. Fees are non-refundable except as required by law or expressly stated.

6. Intellectual property

The platform, including its software and methodology, is owned by SmixAI. These terms grant no rights other than the limited right to use the Services.

7. Disclaimers

Findings and ROI estimates are provided for informational purposes and depend on the data available in connected systems. The Services are provided "as is" without warranties of any kind to the extent permitted by law.

8. Limitation of liability

To the maximum extent permitted by law, SmixAI is not liable for indirect, incidental, or consequential damages, and total liability is limited to the amounts paid for the Services in the preceding twelve months.

9. Termination

Either party may terminate per the applicable order. On termination, we will disconnect integrations and delete or return access metadata in line with the privacy policy.

10. Governing law

These terms are governed by the laws of the jurisdiction stated in your order. Disputes are subject to the courts of that jurisdiction.

Privacy policy

This policy explains what we collect, how we use it, and the choices you have.

What we collect

• Account details (name, work email, company).
• Connection metadata from systems you authorize (object/field/automation inventory, configuration).
• Product usage and diagnostic logs.

How we use it

• To provide grounded findings, ROI estimates, and dashboards.
• To secure, support, and improve the Services.
• To communicate about your account.

Connected-system data

We minimize what we store. Record-level data remains in the source system; we store the access metadata and findings needed to operate the Services. We do not sell your data.

Subprocessors

We use vetted infrastructure and model providers under data-processing agreements. A current list is available on request.

Retention

We retain account and findings data for the life of your account and delete or anonymize it within a defined window after termination.

Your rights

Subject to applicable law, you may request access, correction, export, or deletion of your personal data by contacting us.

International transfers

Enterprise plans support regional data residency (US / EU / APAC). Where data is transferred across regions, we apply appropriate safeguards.

Cookie policy

We use a small number of cookies to operate the site and understand usage.

• Essential — sign-in and security; always on.
• Analytics — aggregate usage to improve the product; optional.

You can control non-essential cookies through your browser or our consent banner. Declining non-essential cookies will not affect core functionality.

Security overview

Security is built into the platform, not bolted on.

• Tenant isolation — every record carries a tenant boundary; no cross-tenant access, ever.
• Least privilege — connections use scoped credentials; record data is read under your permissions.
• Encryption — data encrypted in transit and at rest.
• Auditability — access decisions are logged with their reason for audit and chargeback.
• BYOK & residency — enterprise plans support bring-your-own keys and regional routing.

For a detailed security questionnaire or to report a vulnerability, contact us.