Privacy Policy
Last updated : October 9, 2026
Who we are
SmartBS (smartbs.tn) publishes an online platform to create an online store, a point of sale, a business management tool, an e-commerce site or a marketplace. In this policy, “we” means SmartBS, the data controller for data collected on this website, on our Facebook and Instagram pages, and when creating and managing customer accounts.
Data we collect
Contact and account data: first and last name, email address, phone number, company or project name, password (stored encrypted).
Billing and subscription data: chosen offer, payment and invoice history.
Usage and technical data: pages visited, IP address, browser type, traffic source, clicks on offers, collected through cookies and analytics tools.
Messages you send us (forms, email, WhatsApp, social networks).
Data about your own customers: if you use the platform for your business, your customers' and sales data that you enter remain your responsibility; we host and process them only to provide the service to you.
Why we use it
To create and manage your trial space or subscription and deliver the service (performance of the contract).
To answer your requests, provide support and inform you about your account (contract, legitimate interest).
To measure site audience, improve our pages and offers, and prevent fraud and abuse (legitimate interest, consent where required by law).
To send you commercial information about our offers, with the option to unsubscribe at any time (consent or legitimate interest).
To comply with our legal, accounting and tax obligations.
Social networks (Facebook, Instagram, Threads)
We publish content on SmartBS pages and may receive messages or comments you send us: Meta processes this data under its own policy, and we use it only to reply to you.
If you connect a Facebook Page or Instagram account to the platform (automatic publishing of your products), we store the page identifier and an access token, encrypted, solely to publish what you asked for. You can revoke access at any time from your Meta account settings or by asking us.
We do not sell any data obtained from social networks.
Who we share data with
With technical providers strictly necessary to the service (hosting, email and SMS delivery, payment, analytics, artificial intelligence services for content writing), which may only use it on our instructions.
With authorities where required by law.
We do not sell your personal data.
Where your data is hosted
Each customer has their own isolated space, hosted in Tunisia. Some providers (analytics, email, social networks) may process data outside Tunisia; we ensure they provide appropriate safeguards.
Retention
Account data: for the duration of the relationship, then up to 3 years after the contract ends to handle disputes, unless a longer legal period applies (for example 10 years for accounting records).
Prospect data: 3 years from the last contact.
Analytics data: 13 months maximum.
Your rights
You have the right to access, rectify, erase, object to, restrict and port your data, to withdraw your consent at any time, and to set directives on what happens to your data after your death.
These rights derive from the General Data Protection Regulation (GDPR) for people in the European Union and from Tunisian Organic Law No. 2004-63 of 27 July 2004 on personal data protection.
To exercise them, write to our data protection officer (see below). We reply within one month at most. You may also lodge a complaint with the supervisory authority: the Tunisian National Authority for Personal Data Protection (INPDP), or the authority in your EU country.
To request deletion of your data, see the “Data deletion” page.
Cookies
We use cookies required for the site to work (session, security, language) and audience measurement cookies (Google Analytics). You can refuse or delete them in your browser settings; some site features may then be limited.
Security
We protect your data with appropriate technical and organisational measures: encrypted connections (HTTPS), encrypted passwords and access tokens, isolation of customer spaces, backups and access control. No method is infallible: in case of a data breach presenting a risk, we will inform you and the competent authority within legal deadlines.
Minors
Our services are aimed at professionals and are not intended for people under 16. We do not knowingly collect children's data.
Changes
We may update this policy. The last update date is shown at the top of the page; we will inform you of any significant change.
Data Protection Officer (DPO) and contact
Délégué à la protection des données SmartBS
Email: contact@smartbs.tn
Phone: +216 95 577 414
Address: Tunis, Tunisie