Skip to main content

Lawful Basis for Data Processing

Per GDPR Art. 5 and 6, Smoov documents the lawful basis for each processing activity below. Last updated: May 2026.

Contract Performance (Art. 6(1)(b))

  • Account creation and management
  • Billing and subscription management
  • Delivery of paid features and services
  • Marketplace transaction facilitation

Legitimate Interest (Art. 6(1)(f))

  • RAS scoring and seller intelligence features
  • Fraud prevention and Trust & Safety enforcement
  • Product analytics and platform improvement
  • Jurisdiction detection for privacy compliance routing

Consent (Art. 6(1)(a))

  • Optional marketing communications
  • Non-essential cookies and tracking
  • Optional platform notifications

Legal Obligation (Art. 6(1)(c))

  • Tax record retention
  • Response to lawful authority requests
  • Regulatory reporting obligations

Questions? Contact privacy@smoov.app