Политика конфиденциальности
This policy explains how OrcaSMM ("we"), as data controller, processes personal data when you use https://smmal.com. For users in Türkiye it also serves as the information notice under Law No. 6698 on the Protection of Personal Data (KVKK).
1. Data controller
- Company: OrcaSMM
- Email: support@orcasmm.com
- Website: https://smmal.com
2. Data we process
- Identity and contact: username, email address; if you sign in with Google, the name and email address of your Google account.
- Customer transactions: orders, the links you order for, balance history, support tickets and messages.
- Payments: amount, date, payment method and the transaction ID from the payment provider. Card details are processed by the payment provider; they never reach us and are not stored.
- Security: IP address, browser information, sign-in records, a one-way hash of your password, API usage records.
3. Why we use it
- To create and manage your account,
- To receive, forward and track orders and to handle balance and payments,
- To answer support requests and send transactional emails such as password resets,
- To prevent fraud, abuse and unauthorised access and keep the service secure,
- To meet legal obligations (tax, accounting, requests from authorities).
4. Legal basis
We process data because it is necessary to perform our contract with you, to comply with legal obligations, to establish or defend legal claims, and for our legitimate interest in running a secure service (GDPR Art. 6(1)(b), (c), (f); KVKK Art. 5/2 (c), (ç), (e), (f)).
5. Who we share it with
Only as far as needed for the purposes above:
- Payment providers (e.g. Shopier, crypto payment gateways), to take payments,
- Service providers that fulfil orders, who receive the link you ordered for (not your identity),
- Email delivery, hosting, security (e.g. Cloudflare) and sign-in (Google) providers,
- Public authorities, when legally required.
Some of these providers are located outside your country; transfers are made with the safeguards required by applicable law.
6. Cookies and local storage
We use your browser's local storage and strictly necessary cookies to keep you signed in and to remember your language, currency and theme. Cloudflare Turnstile may be used for bot protection.
Ad measurement (Meta Pixel): To measure how our ads perform, we may use the pixel of Meta Platforms (Facebook/Instagram). It is loaded only if you give your consent in the cookie banner on the site; then the pages you visit, the fact that you signed up and the amount you deposit are shared with Meta (not your name, email or password). Meta processes this data on servers outside your country. Declining does not affect your use of the site; you can withdraw consent at any time by clearing this site's data in your browser.
7. Retention
We keep data while your account is active and afterwards for as long as the law requires (e.g. 10 years for commercial records), then delete or anonymise it.
8. Your rights
You can ask us to:
- Tell you whether we process your data and give you a copy,
- Correct inaccurate or incomplete data,
- Delete your data where the conditions are met,
- Restrict or object to processing, and receive your data in a portable format,
- Tell third parties we shared your data with about corrections or deletions.
You can also complain to your local data protection authority.
9. Contact
Requests are answered free of charge within 30 days.
- Email: support@orcasmm.com
- Support ticket: Support