Privacy policy

SmileAgile (smileagile.io) is run by Wilfried Loche, responsible for your data.

For any question or request about your data: wilfried.wl.loche+smileagile@gmail.com

Voting needs no account. SmileAgile records your score and your comment, and nothing that identifies you: no name, no email, no account.

The results are always shown aggregated, never who voted what.

Your comments are read by your team's managers, who may analyze results and comments with AI tools. Anonymous votes stay anonymous.

Your browser keeps a random code per survey (local storage), to prevent voting twice and to let you change your vote: nothing you typed.

Scrum Masters and managers have an account. SmileAgile keeps:

• your name, your email and your language;
• a hash of your password, never the password itself;
• when your account was created, validated, and when you last signed in;
• your roles, and the teams, surveys and organizations you create, with their results and comments;
• the messages the administrators send you.

Your email is used to validate your account, reset your password and tell you about your account: never for advertising.

If you choose to sign in with one of them, SmileAgile receives your name, your email and the ID of your account at the provider, to recognize you. Nothing else: no contacts, no files.

SmileAgile keeps none of the provider's access tokens: it can't act on your behalf at the provider. Disconnect it at any time in My Profile.

If you connect an AI assistant, SmileAgile keeps its access (a personal access token, stored hashed, or a connection you approved), its scope and when it was last used.

Each reading of the comments and each change made by an AI assistant is logged, for the administrators to check.

The assistant reads what you can read, with your permissions. What it does with the data then depends on its provider: check its privacy settings. Revoke its access at any time in My Profile.

• token: you are signed in. Until you log out, 6 months at most.
• lang: the language you chose in the footer.
• social_login: during a sign in with Google, Apple or Microsoft, 10 minutes at most.

No advertising nor tracking cookie, and none is needed to vote.

• Amazon Web Services: the hosting, the database and the emails, in the United States (us-east-1).
• Google, Apple or Microsoft: only if you sign in with them.
• The provider of the AI assistant you connect, if you do.

Nobody else. Your data is never sold.

• Your account data: as long as your account exists. It is deleted with your account.
• The votes and comments: as long as their team exists, as part of its results.
• The database backups: one day.
• The server's technical logs, with the IP addresses of the requests: a limited time, for security and troubleshooting. They are never linked to the votes.

You can access your data, correct it, have it deleted, get a copy of it, object to its processing or restrict it.

Delete your account at any time in My Profile: your data goes with it, and your teams stay with their other owners, or are deleted.

Write to: wilfried.wl.loche+smileagile@gmail.com. You get an answer within one month.

In the European Union, you can also complain to your data protection authority.

• HTTPS everywhere.
• The passwords and the access tokens are stored hashed.
• An administrator activates every new account, to keep fake profiles out.

This policy may change with the product: the date above tells the last update, and the significant changes are announced in the app.

Terms and conditions