How SmmStoreFront collects, uses, and protects information for merchants using the platform.
This Privacy Policy explains how we collect, use, and protect information when you use the SmmStoreFront platform website, merchant admin, and related services at smmstorefront.com.
Last updated:
1. Who we are
SmmStoreFront ("we", "us", "our") operates the smmstorefront.com platform — a multi-tenant SaaS that lets merchants launch branded storefronts for SMM services and digital accounts.
This policy applies to the platform website, signup, merchant admin, billing, and support interactions with us.
Each merchant operates their own customer-facing store on a custom domain. Merchants are responsible for their storefront privacy practices toward end customers. Where we process end-customer data on a merchant's behalf (for example order routing or hosting), we act as a service provider to that merchant.
3. Information we collect
Account and identity: business or site name, owner name, email address, authentication credentials, email-verification codes, and tenant/domain configuration.
Usage and technical: admin activity logs, IP address, browser type, language preferences, cookies required for sessions and site-admin domain context.
Billing and subscription: plan selection, renewal requests, payment references or proofs submitted for subscription (for example via Payeer or other configured gateways).
Optional Cloudflare connection: if a merchant uses our optional Cloudflare helper, we store encrypted OAuth or API tokens and zone metadata needed to apply DNS or rules on their behalf — only when they explicitly connect.
Support communications: messages you send through contact forms, email, or tickets.
4. How we use information
Provide and secure the platform: authentication, trial and subscription management, domain verification, template apply jobs, and fraud prevention.
Operate integrations you enable: upstream panel APIs (PerfectPanel-compatible), HstockPlus product import, payment gateways, Affilixo or other embeds configured in Code Widgets.
Improve reliability: monitoring, debugging, and product development using aggregated or de-identified data where possible.
Communicate with you: service notices, billing, security alerts, and responses to support requests.
5. When we share information
We share data with subprocessors only as needed to run the service, including hosting and database providers, Cloudflare (CDN/DNS when used), email delivery, payment processors you configure, and translation or AI services if enabled on marketing pages.
We may disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition with notice where practicable.
We do not sell personal information for cross-context behavioral advertising.
6. Cookies and similar technologies
We use essential cookies for admin login sessions, merchant domain context (for example site-admin-domain-id), and language preference.
Optional analytics or marketing tags may be configured by the platform operator via Code Widgets or similar settings.
You can control non-essential cookies through your browser; disabling essential cookies may prevent login.
7. Retention and security
We retain account and billing records for as long as your subscription is active and for a reasonable period afterward for legal, tax, and dispute resolution purposes.
We apply reasonable technical and organizational measures including encryption of sensitive credentials at rest, access controls, and HTTPS in transit. No method is 100% secure.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing.
Submit requests to [email protected]. We will verify your identity before fulfilling requests. Merchants should contact us for tenant-account data; end customers of a merchant store should contact that merchant first.
9. International transfers
We may process data in countries where we or our subprocessors operate. Where required, we use appropriate safeguards for cross-border transfers.
10. Children
The platform is intended for businesses and is not directed to children under 16. We do not knowingly collect children's personal information.
11. Changes
We may update this policy. We will post the revised version on this page and update the effective date. Material changes may be notified by email or in-dashboard notice.