This Privacy Policy explains what personal data ZoraSMM collects, why we collect it and how we protect it.
1. Data we collect
- Account data: username, email address and a securely hashed password (we never store your password in readable form).
- Order data: the public links, quantities and options you submit, and order history.
- Payment data: deposit amounts, payment status and blockchain transaction references from our crypto payment processor. We never receive or store wallet private keys.
- Technical data: IP address, browser user agent and login times, used for security, fraud prevention and rate limiting.
- Support data: messages and attachments you send through tickets, live chat or email.
2. How we use it
- To provide the Service: process orders, deposits, refunds and API requests.
- To secure your account: detect suspicious logins, prevent abuse and enforce rate limits.
- To communicate with you: verification, password reset, order and support emails.
- To comply with legal obligations and resolve disputes.
We do not sell your personal data and we do not use third-party advertising trackers.
3. Sharing
We share only the minimum necessary data with service providers that help us operate the Service: our hosting provider, our crypto payment processor (deposit amount and an order reference) and our delivery partners (the public link and quantity of an order, never your account details). We may disclose data if required by law.
4. Cookies
We use a strictly necessary session cookie to keep you logged in and protect forms against forgery, and a preference cookie to remember light or dark mode. We do not use advertising cookies.
5. Security and retention
Data is transmitted over HTTPS, passwords are hashed with Argon2id, and sensitive keys are encrypted at rest. We keep account and transaction records while your account is active and as long as needed for legal, accounting and fraud-prevention purposes. Technical logs are deleted after a limited period.
6. Your rights
You can request access to, correction of, or deletion of your personal data by emailing [email protected]. Some records, such as financial transactions, may need to be retained for legal reasons.
7. Changes
We may update this policy and will change the "Last updated" date when we do.