Privacy Policy — SMMAiSetup

*Effective Date: January 1, 2026*

SMMAiSetup ("we", "our", or "us") is dedicated to protecting the privacy, security, and confidentiality of our users and their customers. This Privacy Policy outlines our strict data handling practices.

1. Zero Message Logging & End-to-End Encryption

• **WhatsApp Messages**: All message traffic transmitted through the WhatsApp multi-device bridge is encrypted using WhatsApp's Signal Protocol. We do not store, harvest, or inspect customer message content or chat histories on our servers.
• **Ephemeral Processing**: Messages are parsed in-memory solely for matching order numbers and commands (e.g. `!add`, `cancel`, `refill`, `speed`) and are immediately released from memory upon processing.

2. Information We Collect

• **Account Identifiers**: Username, email address, and hashed authentication credentials.
• **Panel Configurations**: SMM panel API URLs and encrypted API keys stored in your isolated database instance.
• **Transaction Logs**: Billing receipts, credit balances, and cryptographic payment hashes for accounting audits.

3. Data Protection & GDPR / CCPA Compliance

• All data in transit is encrypted using TLS 1.3.
• All stored credentials and API tokens are encrypted at rest using AES-256-GCM.
• Users maintain the complete right to export or permanently delete their account and associated database records at any time via the dashboard or by contacting `[email protected]`.

4. Third-Party Disclosures

We never sell, rent, or monetize user data. We only interface with external services explicitly configured by the user (such as your configured SMM provider panels and Binance Pay for payment verification).