Privacy Policy

Last updated: November 9, 2026

This Privacy Policy describes how Manwaring Web Solutions, Inc., doing business as Smartly Done ("Smartly Done," "MWS," "we," "us," or "our"), collects, uses, and shares information when you use our websites and products (together, the "Services").

Contact: [email protected]

Mailing address: 545 W 19th St, Idaho Falls, ID 83402

Additional office: 1600 E 8th Ave Suite A200, Tampa, FL 33605

Public URL: https://smartlydone.com/privacy

It covers the Smartly Done product suite, including:

• Account (account.smartlydone.com) and sign-in through Keycloak
• Sites (sites.smartlydone.com and published customer sites)
• Forms (forms.smartlydone.com)
• Shop (shop.smartlydone.com and related storefront hosts)
• Widgets (widgets.smartlydone.com and embed hosts)
• Homes (homes.smartlydone.com)
• DNS (dns.smartlydone.com)
• Social (Smartly Done Social, Meta app ID 1852424685749087) and Widgets Meta app (App ID 1545923027559568)

Who we are

Manwaring Web Solutions, Inc. is an Idaho corporation (Florida foreign profit corporation filing F21000002959 lists state of incorporation as ID). We operate under the Smartly Done brand.

When a customer uses Sites, Forms, Shop, Widgets, or similar products to collect or display information on their website, that customer is typically the controller of their visitors' data, and Smartly Done acts as a processor or service provider on their instructions. This policy also describes what we process as the operator of the Smartly Done platform itself (accounts, billing, hosting, and our own Meta apps).

Information we collect

Account and sign-in (Keycloak / Smartly Done Account)

When you create or use an Account, we may collect:

• Name and email address
• Organization (team) membership and roles
• Authentication events, session identifiers, and security logs
• Invite and membership history needed to run the product

Sign-in is provided through Smartly Done Account and Keycloak. Apps in the suite rely on that shared sign-in rather than storing separate passwords where Account SSO is enabled.

Billing and payments

When an organization subscribes or pays for Smartly Done plans, payment processing is handled by Stripe. We may keep billing contact details, organization identifiers, and subscription or invoice metadata. We do not store full card numbers on our servers. Stripe's privacy policy applies to payment data Stripe processes. Where a product lets a merchant connect their own payment account, that merchant's processor relationship applies to their customer payments.

Email

We send transactional email (invites, notices, order messages, and similar) through Postmark. Message content, recipient address, and delivery metadata may pass through Postmark to deliver the message.

Hosting and network

Services run on servers in the United States and are commonly fronted by Cloudflare for DNS, TLS, content delivery, and security. Cloudflare and our hosts may process IP addresses, request URLs, user-agent strings, and similar technical data in logs and edge features.

Product content you submit

Depending on the product, you or your organization may submit:

• Website content, media, domains, and configuration (Sites, DNS)
• Form definitions and form responses (Forms)
• Products, orders, and storefront settings (Shop)
• Widget configuration and connected review or social sources (Widgets)
• Property or listing related content (Homes)
• Social post drafts, schedules, and connected Page metadata (Social)

Meta (Facebook / Instagram) data

This applies when you or we connect Facebook Pages or Instagram professional accounts through our Meta apps:

• Smartly Done Social (App ID 1852424685749087)
• Smartly Done Widgets (App ID 1545923027559568)

We may receive, depending on the permissions you grant and the features you use:

• Page and Instagram account identifiers, names, and profile media links
• Page access tokens
• Posts, media metadata, engagement metrics, and scheduling records
• Reviews or recommendations on a Page, when that feature is enabled
• Messages or comments, only if an inbox or similar feature is enabled and permitted
• Staff identity (name, email, role) from Smartly Done Account for people who operate the connection

We do not sell Meta platform data. We do not use Meta data for unrelated advertising. We do not use it to train generalized AI or machine learning models.

For Widgets, Meta use is limited to showing authorized content in the customer's widget and managing that widget in the dashboard, consistent with Meta Platform Terms and Developer Policies. For Social, Meta use is limited to agency scheduling, publishing, and related management features we provide.

Google data (Widgets)

When a customer connects Google Business Profile through Widgets, we may receive Google account identifiers, OAuth tokens, Place IDs, and review content as needed for that feature. Use of Google user data follows the Google API Services User Data Policy, including Limited Use.

Automatically collected technical data

We may collect IP address, timestamps, browser or client type, referrer, approximate location derived from IP, error logs, and diagnostic data needed to operate, secure, and debug the Services.

Cookies and analytics

We use essential cookies and similar technologies for sign-in, session management, security, and remembering preferences. Where we use analytics, we use privacy-friendly analytics to understand aggregate traffic and improve the Services. We do not sell personal information collected through cookies.

Customer-site visitors (processor role)

If you visit a website that a Smartly Done customer built or embedded with Sites, Forms, Shop, Widgets, or similar:

• The customer decides what to collect (for example form fields, store checkout fields, or which reviews to show).
• We process that data to provide the product (host the page, store the submission, serve the widget, process the order).
• Ask that customer for their privacy policy for visitor-facing practices. You can also contact us at [email protected] if you need help identifying which customer account is involved.

How we use information

We use information to:

• Provide, operate, secure, and improve the Services
• Authenticate users and manage organizations, roles, and access
• Process subscriptions and payments
• Send transactional messages
• Connect third-party platforms you authorize (Meta, Google, and similar)
• Publish or display content you configure (sites, widgets, posts, catalogs)
• Comply with law, enforce terms, and protect rights, safety, and security
• Troubleshoot and prevent abuse or fraud

We do not sell personal information.

Sharing

We share information only as needed to run the Services:

• Service providers under contracts that limit their use of the data, including Cloudflare (network and security), Stripe (payments), Postmark (email), and hosting providers in the United States
• Meta / Facebook / Instagram and Google, when you connect those platforms, under their terms and the permissions you grant
• Other members of your organization, according to roles and access settings
• Your customers or site visitors, when you configure public content (for example a published site, a public form, a storefront, or an embed)
• Professional advisors and authorities when required by law or to protect rights and safety
• A buyer or successor if we are involved in a merger, acquisition, or asset sale, with notice where required

Retention

• Account data: kept while the account is active. After an account deletion request, we delete account data within 30 days, except as noted below.
• Backups: rolled off within 90 days.
• Legal and tax records: kept as long as required for law, accounting, tax, security, or dispute resolution.
• Billing records: kept as required for accounting and tax.
• Meta / Google tokens: kept while the connection remains authorized; deleted or invalidated on disconnect or a valid deletion request.
• Cached social posts, reviews, and media: kept while the source is connected and as needed for the feature; removed on disconnect or deletion request where feasible.
• Customer product content (forms, sites, shop orders, and similar): kept per the customer's use of the product, then subject to the backup window above after deletion.

You can request deletion; see User Data Deletion.

Your choices

• Update profile and organization settings in Account where available
• Disconnect Meta or Google connections in the relevant product
• Remove our Meta apps under Facebook Settings → Apps and Websites (or Business Integrations)
• Opt out of marketing email using the unsubscribe link (transactional mail may still be required to run the service)
• Email [email protected] to request access, correction, or deletion

Security

We use reasonable technical and organizational measures, including HTTPS, access controls, and encrypted storage for sensitive tokens where implemented. No method of transmission or storage is completely secure.

Children's privacy

The Services are for business use. They are not directed at children under 13, and we do not knowingly collect personal information from children under 13.

International users

We are based in the United States. Information is processed on servers in the United States. If you access the Services from outside the U.S., you understand that information may be processed in the United States.

Changes

We may update this policy. The "Last updated" date will change when we do. Material changes may also be announced in product UI or by email where appropriate. Continued use after an update means you accept the revised policy.

Contact

Email: [email protected]

Company: Manwaring Web Solutions, Inc. dba Smartly Done

Mailing address: 545 W 19th St, Idaho Falls, ID 83402

Additional office: 1600 E 8th Ave Suite A200, Tampa, FL 33605

Governing law for disputes about this policy is addressed in our Terms of Service.