Privacy Policy

Summary

SMART Reply is built by bSMART AI Ltd. We help you draft email replies, LinkedIn comments, and LinkedIn posts in your tone, grounded in your own knowledge base, emails, and prior content. This page explains what data we collect, what we do with it, and how to control it.

We do not sell your data. We do not use your content to train shared models. Your data is used to serve you and only you.

Who we are

bSMART AI Ltd, a company registered in the United Kingdom. Contact: bob.ottley@bsmart-ai.com.

The two products this policy covers

• SMART Reply for Outlook — a Microsoft Outlook add-in that drafts email replies, files documents intelligently, learns your tone, and integrates with your inbox, calendar, and document storage.
• SMART Reply for LinkedIn — a Chrome / Microsoft Edge browser extension that adds an inline "Draft with SMART Reply" button to LinkedIn comments and posts. It connects to your existing SMART Reply account.

What the SMART Reply for LinkedIn extension reads and writes

The browser extension is intentionally narrow in scope. Here is everything it touches.

On linkedin.com

• The page DOM, so it can find comment input fields and the "Start a post" trigger and overlay the SMART Reply button.
• The text of the post or comment you are replying to (only at the moment you click the SMART Reply button), so it can draft a relevant reply.
• The visible top-level comments on that post (only at the moment you click), so the draft fits the conversation rather than ignoring it.

The extension never reads your private messages, your connections list, your profile beyond what is publicly visible on the post, or any LinkedIn page other than the one currently in front of you.

On app.bsmart-ai.com

• A short-lived session token, which the SMART Reply portal page broadcasts to the extension via window.postMessage when you sign in. The token is stored in chrome.storage.local on your device only and is used to authenticate API calls.

Clipboard

• The extension writes (never reads) to your clipboard when you click "Open in LinkedIn" on a draft, as a fallback for inserting the text into LinkedIn's compose modal.

What we send to our servers

When you click the SMART Reply button on a post or comment, we send to our backend at app.bsmart-ai.com:

• The post or comment HTML so our AI can read it, plus any direction you typed (refinement, tone, intent).
• Your session token in the Authorization header so we know who you are.
• Anonymous diagnostic events such as "selectors did not match this LinkedIn layout" so we can fix the extension when LinkedIn changes their DOM. These contain no post content.

We do not store the post HTML. It is sent to our AI provider, processed, and discarded. We do store the draft we generate for you, with a unique audit number, in your account, so you can see your drafting history.

How AI processing works

SMART Reply uses Anthropic's Claude (Sonnet for drafting, Haiku for extraction and classification) and OpenAI's GPT-5 mini (for some classification tasks). Your post text and your direction are sent to those providers under their zero-data-retention enterprise terms. They do not retain your inputs and they do not train on your data.

Your knowledge base, emails, and prior drafts

Inside your SMART Reply account, your KB, filed documents, prior drafts, and tone profile are stored in our database (Supabase, EU region) and used only to generate drafts for you. They are never shared with other users or organisations.

Data retention and deletion

• Drafts are retained until you delete them or close your account.
• Auto-generated email drafts are deleted from your Outlook on a schedule you control (default 14 days).
• Diagnostic logs are kept for 30 days then deleted.
• Closing your account deletes all of your content within 30 days.
• You can request export or deletion of your data at any time by emailing bob.ottley@bsmart-ai.com.

Cookies and tracking

The browser extension does not set any cookies and does not perform any analytics or tracking outside of the diagnostic events described above. The SMART Reply portal at app.bsmart-ai.com uses session cookies for authentication only.

Permissions the extension requests, and why

• storage — to cache your session token in chrome.storage.local so the extension knows you are signed in.
• Host access to https://app.bsmart-ai.com/* — to receive your token from the SMART Reply portal page and to call the SMART Reply API.
• Host access to https://www.linkedin.com/* — to display the "Draft with SMART Reply" button on comment boxes and the "Start a post" trigger, and to read the post text you are responding to only when you click that button.

Your rights (GDPR / UK GDPR)

If you are in the UK or the EU you have the right to access, rectify, port, restrict, object to processing of, and erase your personal data. Email bob.ottley@bsmart-ai.com with any request and we will respond within 30 days.

You also have the right to lodge a complaint with your supervisory authority (the Information Commissioner's Office in the UK).

Children

SMART Reply is not directed at children under 16 and we do not knowingly collect data from them.

Changes to this policy

If we change this policy materially we will update the "Last updated" date at the top and, where required, notify you in-product. Continued use after a change indicates acceptance of the new policy.

Contact

Questions, requests, or concerns: bob.ottley@bsmart-ai.com.