Privacy Policy

We — the SMMLotos team — are responsible for the personal data processed through SMMLotos. This policy describes what data we collect when you use SMMLotos and how we process it. For any question about your personal data, contact fanmoon55@gmail.com.

1. What data we collect

Data	Purpose
Email, password hash	Account registration and login
Order history, target social account links	Fulfilling ordered services, shared with the provider fulfilling the order
Balance, top-up and charge history	Accounting for transactions within the Service
Support ticket messages	Handling support requests
IP address, session data (cookies)	Authentication, abuse prevention, interface language preference

2. Legal basis for processing

We process this data to provide the Service, meet our obligations to you, respond to your requests, and protect the Service from abuse — this applies to every user the same way, regardless of country.

Additionally, for EU users: processing of data necessary to provide the Service (email, orders, balance) relies on performance of a contract (GDPR Art. 6(1)(b)); support ticket data is processed on the basis of legitimate interest in resolving inquiries (GDPR Art. 6(1)(f)).

3. Disclosure to third parties

To fulfill an order (e.g., growing followers), the target account link and order quantity are shared with the provider that actually performs the service. We do not sell personal data to third parties or use it for advertising targeting outside the Service.

4. Retention period

We do not delete accounts on our own initiative: an account's balance may hold the User's funds, so account data (including balance and order history) is kept for as long as needed to account for those funds and for our mutual obligations, even if the account goes unused for a long time.

5. User rights

Wherever you are, you can write to us at any time to ask what data we hold about you, ask us to correct an inaccuracy, or ask any question about how it's used.

Additionally, EU users have the right to restrict processing of, port, and object to the processing of their data under GDPR. The right to erasure (GDPR Art. 17) does not apply while an account holds a balance or has open orders or requests — retaining that data is necessary to account for our mutual obligations and to prevent fraud (GDPR Art. 17(3)(b), (e)). For questions about your data or rights, contact fanmoon55@gmail.com.

6. Cookies

The Service uses technical cookies (login session, interface language preference). These cookies are necessary for the Service to function and are not used for advertising tracking.

7. International data transfers (for EU users)

Part of our team and infrastructure is located outside the European Economic Area (EEA), so data from EU users may be transferred outside the EEA. This transfer happens at the user's own initiative and is necessary to provide the service they requested (GDPR Art. 49(1)(b)); as the Service grows we plan to move to Standard Contractual Clauses (SCCs) or a comparable safeguard.

8. Contact

For questions about data processing: fanmoon55@gmail.com