Data processing terms

These terms describe how SMMFor handles the personal data of your panel's customers. They form part of the terms of service.

Roles

For your customers' data (names, email addresses, order and payment records in your panel) you are the controller and SMMFor is the processor. We process this data only to run your panel and only on your instructions as given through the product.

What we do with it

• Store it on our hosting provider's servers and keep encrypted backups.
• Send emails your panel triggers (order updates, password resets) through our email provider.
• Never sell it, never use it for advertising, and never contact your customers on our own behalf.

Security

Access is limited to staff who need it to operate the service. Secrets such as provider and payment keys are encrypted. Panels are isolated from each other at the database level.

Sub-processors

Hosting (data centre provider), email delivery (Resend) and, if you use them, payment gateways you connect. We will announce new sub-processors on this page.

Breaches

We will notify you without undue delay after becoming aware of a personal data breach affecting your panel.

End of service

You can export your customers, orders and payments as CSV from the admin at any time. After a panel is closed, its data is kept for 30 days so it can be reopened, then deleted.

Requests

If one of your customers asks you to access or delete their data, you can do it from the admin. Contact support if you need help.