Your data, handled with care.
SmashOne holds your account, your connected channels, and the customer messages your AI employees reply to. Here's exactly how we protect them — in plain language.
Hiring a person costs thousands a month. Your first AI employee is $49.
The essentials.
Four things we get right so you don't have to think about them.
Encryption
Traffic is encrypted in transit with TLS, and your data is encrypted at rest.
Access control
Two-factor authentication on accounts, and least-privilege access for our team — only what's needed to support you.
Your data is yours
We don't sell your data, and we never use your customers' conversations to train external AI models.
Backups & reliability
Regular backups and monitoring keep your workspace running and your data recoverable.
What we hold, and where it lives.
What we hold
Your account details, the social channels you connect (via secure tokens — we never see your social passwords), your business catalog and FAQ, and the customer messages your AI employees handle.
Where it lives
Your data is hosted in the United States with our infrastructure providers.
How long
We keep your data while your account is active, and delete or anonymize it after you close your account, per our Privacy Policy.
SmashOne is not a HIPAA-covered service and we do not sign Business Associate Agreements. Use SmashOne for marketing and customer messaging only — do not store or transmit patient data or other protected health information (PHI) through the Service.
Who helps us run SmashOne.
We use a small set of trusted providers. Each handles a specific job — nothing more.
| Provider | What they do |
|---|---|
| DigitalOcean | Cloud hosting & databases (US) |
| Cloudflare | CDN, DNS & network protection |
| Google Cloud (Vertex AI) | The AI that drafts assistant replies |
| Stripe | Payments (PCI-DSS Level 1 provider) |
| Google Workspace | Transactional email (verifications, receipts) |
| Sentry | Error monitoring to fix issues fast |
This list can change as we improve the service; the current list is always in our Privacy Policy.
How the AI uses your content.
Your AI employees draft replies from the business catalog, FAQ, and tone you configure. AI replies are clearly labeled as automated. We don't use your customers' conversations to train external models, and a human on your side can always step in.
Security in your hands.
A few controls you own — turn them on from your workspace.
Two-factor authentication
Turn on 2FA in your workspace settings.
Strong passwords
We enforce strong passwords and never store them in plain text.
Session control
Sign out of other sessions anytime.
Found a vulnerability? Tell us.
We welcome responsible disclosure. Email info@smashone.us with the details and steps to reproduce, and we'll respond. Please don't access other users' data or disrupt the service while testing.
See it working before you paytwo sample businesses run day-to-day by AI employees: Tampa Pasta House · Casa Lista.
Open the demosIllustrative examples — sample businesses, not real customers.
Two live sample businesses. Any other business runs the same way — your catalog, your hours, your channels. Does it fit your business?
