Privacy Policy

Last updated 18 August 2026

Two different roles. Smart Services is a backend platform used by other applications. For our own account holders we decide how data is used (a controller). For the end users who sign in to a customer's app through our hosted sign-in, we only process data on that customer's instructions (a processor) — their privacy policy governs that relationship, and this one explains what we do on their behalf.

Who we are

Smart Services is operated by Wizewerx Ltd, a company registered in England and Wales (company no. 06003824), registered office 124 City Road, London, EC1V 2NX. Wizewerx Ltd is the data controller. For any privacy question or request, contact privacy@wizewerx.com.

Data we handle for our own account holders

Account details: email address, name, and authentication records.
Application configuration you create, including API keys (stored hashed, never in plain text).
Usage and billing records needed to operate and invoice the service.
Operational logs used to keep the platform running and secure.

Hosted sign-in: data we process for our customers

When you sign in to an application that uses our hosted sign-in, we handle the minimum needed to prove who you are and hand that result back to that application:

Email address — to send your one-time code and to identify your account.
One-time codes — stored hashed, expiring within minutes, and discarded once used.
Name and profile picture — only if provided by a social login you chose.
Sign-in timestamps — so the application can show recent activity and detect abuse.

Accounts are kept separate for each application. Signing in to one application does not create an account in, or reveal your details to, any other application on the platform — including other applications operated by Wizewerx.

Social login (Google and LinkedIn)

If you choose "Continue with Google" or "Continue with LinkedIn", we request only your basic profile and email address. We use them to create or match your account in the application you are signing in to. We do not post anything, read your contacts, or access anything else in your Google or LinkedIn account.

Where an application offers publishing to a social network, that is a separate, explicit permission requested at the moment you ask for it — never as part of signing in — and you can withdraw it at any time from your account settings in that application or from the social network's own settings.

Google user data received through Sign in with Google is used solely to provide the sign-in feature described here, is never sold, and is never used for advertising.

What we never do

We do not sell personal data, and we never have.
We do not use sign-in data for advertising or profiling.
We do not record your screen or replay your browsing sessions.
We do not track you across unrelated applications or websites.

Sub-processors

We use a small number of providers to run the service: cloud hosting and databases in the EU/UK, an email delivery provider for transactional messages such as your sign-in code, and Stripe for payments. They act on our instructions and may not use the data for their own purposes.

How long we keep data

One-time codes expire within minutes and are deleted. End-user accounts are retained for as long as the application keeps them, and are deleted when that application deletes them or closes its account with us. Billing records are kept as long as the law requires.

Your rights

You can request access to, correction of, or deletion of your personal data, object to processing, or ask for a copy in a portable format. If you signed in to an application through our hosted sign-in, ask that application first — they control your account, and we will act on their instruction. You can also write to us directly and we will help route the request. You may complain to your local data protection authority; in the UK this is the ICO.

Security

Data is encrypted in transit. One-time codes and API keys are stored hashed; access credentials we hold on your behalf are encrypted at rest. Access to production systems is restricted and logged.

International transfers

Our infrastructure is in the EU and UK. Where a provider processes data elsewhere, we rely on Standard Contractual Clauses or an equivalent safeguard.

Changes

If we make a material change, we will update the date at the top of this page and notify account holders before it takes effect.

Wizewerx Ltd (company no. 06003824) · Privacy · Terms · privacy@wizewerx.com