Legal
Last updated 2 August 2026. This policy explains what we collect, why, and the control you keep over it.
SMM Tools — Is All You Do — Complete Social Media Management Tool. This policy is issued by SMM Tools Systems Ltd and covers the website, the app and every studio inside it.
Account details (name, email, business name, billing address), authentication tokens issued by the social networks you connect, content and media you upload, usage and device telemetry, and payout details where you join the affiliate marketplace.
To publish content on your instruction, to schedule and retry deliveries, to produce analytics and financial reporting, to process payments and affiliate commissions, to provide support, and to detect abuse or fraud.
Access tokens are encrypted at rest and used only to perform actions you have configured. We never post without an explicit instruction from you or a schedule you created. You can revoke a connection at any time, which deletes the associated tokens within 24 hours.
Card and bank details are handled by our PCI-DSS compliant payment processors. SMM Tools stores only the last four digits, brand, expiry and billing country needed for receipts and tax compliance.
We share data with processors that make the service work — hosting, payment processing, email delivery, analytics and affiliate networks for commission attribution. We do not sell personal data. Where an affiliate network requires a click identifier, only pseudonymous identifiers are sent.
Account data is retained while your account is active and for 30 days after deletion, except records we must keep for tax and accounting purposes (typically 7 years). Media assets are removed from storage within 30 days of deletion.
Under GDPR, UK GDPR and CCPA you may request access, correction, export, deletion, restriction of processing, or object to processing. Requests are answered within 30 days at privacy@smmtools.app.
Data may be processed in the EEA, UK and United States. Transfers rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
Encryption in transit and at rest, least-privilege access controls, audit logging, mandatory MFA for staff, annual penetration testing and continuous dependency scanning.
SMM Tools is not directed to anyone under 16. We delete accounts we learn belong to children.
Material changes are announced by email at least 14 days before taking effect. Questions: privacy@smmtools.app, SMM Tools Systems Ltd, Data Protection Officer.