Privacy Policy

1. Introduction

Smooth Intentions LLC ("Smooth Intentions," "we," "us," or "our") operates the platform accessible at smoothintentions.beauty (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform, including any personal data.

We are committed to protecting your privacy and handling your personal information with care and respect. This Privacy Policy complies with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable US state and federal privacy laws.

By using the Platform, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

We collect information you provide directly to us, as well as information gathered automatically when you use the Platform. The types of information we collect include:

Information You Provide When:

• Creating an account or registering as a professional or client
• Booking or managing appointments
• Completing the skin quiz and receiving AI recommendations
• Completing service agreements with electronic signature
• Submitting a review of a professional
• Contacting support or sending inquiries
• Uploading profile photos or other content

3. Skin Quiz & AI Analysis Data

When you complete the Smooth Intentions skin quiz, you provide personal health-related information including:

• Skin type and condition
• Primary skin concerns and goals
• Current skincare routine and products used
• Skin sensitivity and allergies
• Age range and geographic/climate information
• Budget preferences and lifestyle factors

This quiz data is processed by our AI engine to generate personalized product recommendations. Quiz results are stored in your account and associated with your profile.

You may delete your skin quiz results at any time by contacting us at smoothintentions@polsia.app. Deletion requests are processed within 30 days.

4. AI-Generated Recommendations

Smooth Intentions uses artificial intelligence to analyze your skin quiz responses and generate personalized skincare product and treatment recommendations. This section explains how AI-generated data is handled.

AI-generated recommendations:

• Are produced by OpenAI's large language models, accessed via our API
• Are based on the quiz data you voluntarily provide
• Do not constitute a diagnosis, prescription, or medical treatment plan
• Should not replace professional medical consultation
• May be inaccurate, incomplete, or unsuitable for your individual circumstances

We log AI inputs (quiz data) and outputs (recommendations) to improve our service and for quality assurance purposes. These logs are retained for a maximum of 12 months.

5. Client History & Notes

Professionals using the Platform may maintain notes and records about their clients. This includes:

• Appointment history and service records
• Professional observations, session notes, and ratings
• Skin conditions, allergies, and treatment preferences documented by the professional
• Follow-up recommendations made by the professional

Client history and professional notes are stored securely on our Platform and are accessible to the professional account that created them. Clients can request access to notes about them by contacting their professional directly or contacting us.

Professionals are responsible for ensuring their note-taking practices comply with applicable privacy laws in their jurisdiction, including any applicable client confidentiality requirements.

Smooth Intentions does not use client notes or history for any purpose other than facilitating the professional's service delivery on the Platform.

6. Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may impair Platform functionality.

7. How We Use Your Information

We use the information we collect for the following purposes:

• Creating and managing your account
• Facilitating appointment booking and scheduling
• Processing payments via Stripe
• Providing AI-powered skin analysis and recommendations
• Delivering service agreements and electronic signatures
• Enabling communication between professionals and clients
• Improving platform features and user experience
• Detecting and preventing fraud, abuse, and security threats
• Complying with legal obligations
• Sending transactional emails (booking confirmations, reminders, etc.)
• Providing customer support

We do not use your personal information to make automated decisions that significantly affect you, except for AI-generated recommendations (which are advisory only and do not bind you to any action).

8. Third-Party Services

Smooth Intentions relies on third-party services to operate the Platform. These services receive or process your data under their own privacy policies:

9. Data Sharing & Disclosure

We do not sell your personal information to data brokers or third parties for marketing purposes. We may share your information in the following limited circumstances:

• Service Providers: With trusted vendors who help operate the Platform (hosting, analytics, AI processing, payment processing), under strict data protection agreements
• Professionals: Your scheduling and contact information is shared with the professional you book with to facilitate your appointment
• Clients: Professionals may share their notes and history with their clients as part of service delivery
• Legal Compliance: When required by law, court order, or government request, including to comply with law enforcement
• Safety: To protect the rights, safety, or property of Smooth Intentions, our Users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: Retained while account is active; deleted within 90 days of account closure (subject to legal holds)
• Skin quiz results: Retained for the life of your account; deleted upon account deletion request
• AI recommendation logs: Retained for a maximum of 12 months for quality assurance
• Service agreement signatures: Retained for minimum 7 years per e-signature legal requirements
• Payment records: Retained for minimum 7 years per financial record-keeping requirements
• Appointment history: Retained for the life of your account and up to 3 years after account closure

After these periods, data is securely deleted or anonymized. You may request deletion of your personal data at any time (see Section 12 — CCPA Compliance for details).

11. Data Security

We take data security seriously and implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• All OAuth tokens encrypted with AES-256-GCM
• Access controls limiting data access to authorized personnel only
• Regular security assessments and penetration testing
• Secure sandbox environment isolating agent operations
• Parameterized database queries to prevent SQL injection

While we strive to protect your information, no method of transmission or storage is 100% secure. If you become aware of a data breach, please contact us immediately at smoothintentions@polsia.app.

12. CCPA Compliance

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) regarding your personal information:

Your California Rights

• Right to Know: Request disclosure of what personal information we collect, use, disclose, or sell about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of your personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Limit Use: Limit use of sensitive personal information to that which is necessary to provide services

How to Submit a Request

California residents may exercise their rights by emailing us at smoothintentions@polsia.app with "Privacy Request" in the subject line. Please include:

• Your full name and email address
• A description of the right you wish to exercise
• Any additional details that help us locate your information

We will verify your identity before processing your request and respond within 45 days. For deletion requests, we will confirm deletion and provide written confirmation.

You may also designate an authorized agent to submit requests on your behalf, provided you give the agent written permission and we can verify the agent's identity.

13. Children's Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as quickly as possible.

Parents or guardians who believe their child has provided us with personal information may contact us at smoothintentions@polsia.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Post the revised policy on the Platform
• Send an email notification to registered users for significant changes
• Obtain your consent where required by applicable law

Continued use of the Platform after changes take effect constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

Smooth Intentions LLC
Email: smoothintentions@polsia.app
Website: smoothintentions.beauty

We will respond to all privacy-related inquiries within 45 days. For urgent matters such as data breaches, please indicate "URGENT" in your subject line.

For California residents, you may also contact the California Attorney General's Office at:

California Attorney General's Office
Privacy Unit — Consumer Help Center
oag.ca.gov/contact/consumer-complaint-against-business-or-company