SMM Posting
SMM Posting · документы

Personal Data Processing Policy

What data SMM Posting processes, why it is used, when it may be shared with external services, and how users can exercise their rights.

Revision dated September 9, 2026

This Policy explains how personal data of SMM Posting users is processed and protected at https://smmposting.com. This English text is provided for convenience; the Russian original is available at smmposting.ru/privacy.

1. Data controller

The controller is ООО «Гид Групп», INN 5027222592, OGRN 1145027020709, address: 140002, Московская область, Люберецкий район, город Люберцы, Октябрьский проспект, д. 111/119, 26. Questions may be sent through SMM Posting Support or to info@smmposting.ru.

2. Data we may process

  • name, username, email, language, time zone and profile data supplied by the user;
  • account and authentication data; passwords are stored as cryptographic hashes rather than plain text;
  • projects, teams, roles, connected channels, content plans, publications, comments, approvals and automation settings;
  • uploaded content and files, including text, images, video, documents and metadata;
  • identifiers and technical connection data for social networks, messengers, Google Sheets, RSS, cloud sources and other integrations, including access tokens or keys where required;
  • AI settings, prompts, project context and selected AI provider access method;
  • plan, payment amount/status, transaction identifiers, auto-renewal and internal AI balance; full bank-card details are not stored by SMM Posting;
  • support requests, notification history, IP address, user agent, cookies, session identifiers, security and error logs.

3. Purposes

  • registration, authentication and account security;
  • providing SMM Posting and performing the agreement with the user;
  • source synchronization, content planning and publication to user-selected external services;
  • analytics, reports, recommendations and publication history;
  • team collaboration and approval;
  • AI functionality and AI balance accounting;
  • payment processing and accounting obligations;
  • service, project, payment and other user-selected notifications;
  • support, diagnostics, abuse prevention and security;
  • product improvement using technical or de-identified analytics;
  • informational and marketing communications only within applicable consent and notification settings.

4. Legal bases

Processing is based on grounds provided by Russian law, including consent, performance of a contract or pre-contractual steps requested by the user, and compliance with legal obligations.

5. External services

Data needed for a selected function may be transferred to relevant processors or external platforms, including Robokassa, email and infrastructure providers, VK, Odnoklassniki, Telegram, MAX, YouTube, Facebook*/Instagram*/Threads*, TikTok, Google, Yandex, OpenAI, OpenRouter and other providers selected by the user.

External platforms process data under their own terms and policies. The user chooses which external connections to activate.

6. Payment data

Payments are completed on the payment provider's side. SMM Posting receives transaction status, amount and identifiers needed to activate and account for the service. Full card number and CVC/CVV are not stored in the SMM Posting database.

7. Cookies and web analytics

Technical cookies and session data are used for authentication, security and preferences. Public pages may also use analytics systems configured by the Controller.

8. Retention

Data is retained no longer than necessary for processing purposes, contract performance, support and mandatory legal requirements. Security logs and backups may persist for a limited period under normal backup cycles. Payment/accounting records may be retained for mandatory statutory periods.

9. Security

The Controller uses organizational and technical measures intended to prevent unauthorized access, alteration, disclosure or destruction of data.

10. User rights

Users may request information about processing, correction, blocking or deletion where legally applicable, and may withdraw consent where processing is based on consent. Requests can be sent through Support or to info@smmposting.ru; identity verification may be required.

11. Account deletion

When an account is deleted, data needed only to provide access is deleted or de-identified subject to technical capabilities and legal retention requirements. Deletion may make projects, history, integrations and other personalized functions unavailable.

12. Notifications

Messages necessary for account operation, security, payments and contract performance may be sent independently of marketing preferences. Project, informational and marketing categories are controlled by notification settings where available.

13. Policy changes

This Policy may be updated when functionality, law or processors change. The current English version is published at /privacy.

* Instagram, Threads and Facebook are products of Meta Platforms Inc.; Meta Platforms Inc. is recognized as an extremist organization and its activities are prohibited in the Russian Federation.

14. Controller details

ООО «Гид Групп»
INN 5027222592, KPP 502701001, OGRN 1145027020709
140002, Московская область, Люберецкий район, город Люберцы, Октябрьский проспект, д. 111/119, 26
Phone: +7 (499) 408-08-75
Email: info@smmposting.ru