Privacy Policy

Last updated: May 13, 2025

1. Who we are

SMMPlugin.com ("we", "us", or "our") operates the smmplugin.com website and the account.smmplugin.com cloud platform. We provide a service that connects WooCommerce stores to SMM panels for automated order processing.

For questions about this policy, reach us through the contact form.

2. What data we collect

Account data: Email address and password when you create an account.

Site data: WooCommerce site URL and name, and the product list synced from your store.

Order data: WooCommerce order IDs, SMM order IDs, links (e.g. social media profile URLs submitted by your customers), quantities, and statuses. We process this data solely to route orders to your configured SMM panel.

API credentials: API keys you enter for SMM panels, stored encrypted.

Usage data: Standard server logs (IP address, browser type, pages visited) for security and performance.

3. How we use your data

  • To provide and operate the SMMPlugin platform
  • To route WooCommerce orders to the correct SMM panel
  • To send transactional emails (account confirmation, password reset)
  • To respond to your support requests
  • To improve and troubleshoot our service

We do not sell your data to third parties. We do not use your data for advertising.

4. Data retention

We retain your account data as long as your account is active. Order data is retained for 12 months by default. You can request deletion of your account and associated data at any time by contacting us.

5. Third-party services

We use the following third-party services to operate the platform:

  • Supabase — database and authentication (EU region)
  • Vercel — hosting and edge network
  • Google Analytics — anonymous usage statistics, loaded only with your consent
  • PostHog (EU-hosted) — product analytics and session replay (text inputs masked), loaded only with your consent
  • Cloudflare Turnstile — bot/spam protection on public forms

Your data may be processed by these providers subject to their own privacy policies. We only share the minimum data necessary for service operation.

6. Cookies

We use essential cookies for authentication (session management). We also use Google Analytics for anonymous usage statistics, but only if you accept it in the cookie banner — never for advertising. See our Cookie Policy for details.

7. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data, and to object to or restrict processing. To exercise these rights, reach us through the contact form.

8. Security

We implement industry-standard security measures including encryption in transit (HTTPS), encrypted storage of API credentials, and access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

9. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.