Privacy Policy

1. Data about you

When you create and use an account, we keep:

• Account: your name, your email address, and your password as a one-way hash. We never store the password itself.
• Sign-ins: the IP address and browser of each session, and failed sign-in attempts, to keep your account safe.
• Billing: your plan, your invoices and payments, and the payment details you send us, such as a transaction ID.
• Activity: what changed in your account and websites, and a record of the emails we sent you (address, subject and time, not the text).
• Support: the messages you send us.

2. Data you connect

For each website you add, we store your panel's address, your panel API key and your bot token (both encrypted), the Telegram groups you link, your providers and your settings.

3. Data about your customers

Your bot handles data about your panel's customers so it can help them: their Telegram ID, name and username, the messages they send the bot, and the orders and tickets it looks up in your panel. For this data you are the controller and we are your processor: we use it only to run your bot, the way your settings tell it to. Your customers should contact you about their data, and we'll help you answer them.

4. How we use data

• To run SMMApps: read tickets, forward requests to providers, track orders, and answer with Zentro.
• To email you: sign-in links, invoices, reminders, and alerts when a bot stops.
• To keep the service safe: rate limits, sign-in checks and the activity log.
• To bill you, and to keep the records the law requires.
• To find and fix problems, using logs that are rotated automatically.

We don't sell personal data, we don't show ads, and we don't use your customers' data for our own marketing.

5. Who else handles data

We share only what each service needs to do its part:

• Our server host: the database and bot data live on a server we rent from a hosting company.
• Resend: sends our emails, so it receives your email address and the email.
• AI providers (OpenRouter and the model hosts it uses, or Google Gemini): when Zentro is on, they receive the customer's message and the details needed to answer it. Their own terms decide how long they keep it.
• Telegram: delivers your bot's messages. Telegram's privacy policy applies to your bot and groups.
• Your panel: we call your panel's API with your key.
• Payments: crypto payments go through the wallet, exchange or payment service you choose. Blockchain transactions are public.
• Authorities: only when the law requires it.

Some of these services work from other countries. When data goes abroad, we rely on the safeguards the law requires for that transfer.

6. How long we keep data

• Account data: while your account is open. Ask us and we'll delete it, except records we have to keep.
• Website data (bot data, case history and logs): until you delete the website, or 60 days after your account is paused. We email you a week before.
• Invoices and payment records: as long as accounting and tax law requires.
• Security and email records: only as long as they help keep the service safe and reliable.

7. Security

Passwords are hashed with scrypt. API keys and bot tokens are encrypted, and the dashboard never shows them in full again. All traffic uses HTTPS, and your sign-in cookie can't be read by scripts on the page. No system is perfectly secure; if we learn of a breach that affects your data, we'll tell you without delay.

8. Cookies

We use one cookie, smm_session, to keep you signed in (for up to 30 days). Your theme choice, dark or light, is saved in your browser. We don't use advertising or analytics cookies.

9. Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it. Write to [support email]. Depending on where you live, you may also complain to your data protection authority.

10. Children

SMMApps is a service for businesses and isn't meant for anyone under 18.

11. Changes

If we change this policy, we'll update the date at the top, and we'll email you about important changes.

12. Contact

• [business name]
• Email: [support email]