Privacy, in plain words

Last updated 31 October 2026. MySmith follows the New Zealand Privacy Act 2020. This page says what we collect, why, who touches it, and how you stay in control.

What we collect and why

• Your name, email and mobile number, to sign you in and reach you.
• What you tell your Smithy about your business, so its advice fits you. You can see, correct and delete every fact under “What your Smithy knows”.
• Your Google Ads, Meta and analytics data, mirrored daily, so your Smithy can plan, report and prove whether a change worked.
• Your results (enquiries, bookings and orders), including customer contact details where your forms capture them. These are your customers’ details: we use them only to show you your enquiries and to count them for your own account, and nowhere else.
• Every stamp, with your name and the time, because that is the record of what you approved.

Who touches it (our sub-processors)

• Anthropic (United States): runs the Claude models behind your Smithy. We send it your business facts and your numbers, with contact details removed from logs.
• Clerk (United States): sign-in by one-time code. Holds your email or mobile.
• Vercel and Neon (Sydney, Australia): hosting and the database.
• Google and Meta: your ad accounts stay yours. MySmith is added as a manager, never the owner.
• WhatsApp Business Platform (Meta): only if you link your number, and you can switch it off any time by replying STOP.

What we never do

• Spend your money or publish an ad without your stamp.
• Sell or share your customers’ details with anyone else.
• Compare you with other businesses’ data. Your report compares you with your own history.

Your rights

Export everything from Settings any time. Ask us to delete your account from Settings and we confirm by email within two working days. If something goes wrong with your data we tell you, and the Privacy Commissioner where the law requires it. Questions: privacy@mysmith.nz.

Your Smithy is an AI assistant built on playbooks from senior NZ media experts. It never pretends to be a person.