OrcaSMM
Registrarse

Política de privacidad

Última actualización: 12 de octubre de 2026

This policy explains how OrcaSMM ("we"), as data controller, processes personal data when you use https://orcasmm.com. For users in Türkiye it also serves as the information notice under Law No. 6698 on the Protection of Personal Data (KVKK).

1. Data controller

2. Data we process

  • Identity and contact: username, email address; if you sign in with Google, the name and email address of your Google account.
  • Customer transactions: orders, the links you order for, balance history, support tickets and messages.
  • Payments: amount, date, payment method and the transaction ID from the payment provider. Card details are processed by the payment provider; they never reach us and are not stored.
  • Security: IP address, browser information, sign-in records, a one-way hash of your password, API usage records.

3. Why we use it

  • To create and manage your account,
  • To receive, forward and track orders and to handle balance and payments,
  • To answer support requests and send transactional emails such as password resets,
  • To prevent fraud, abuse and unauthorised access and keep the service secure,
  • To meet legal obligations (tax, accounting, requests from authorities).

4. Legal basis

We process data because it is necessary to perform our contract with you, to comply with legal obligations, to establish or defend legal claims, and for our legitimate interest in running a secure service (GDPR Art. 6(1)(b), (c), (f); KVKK Art. 5/2 (c), (ç), (e), (f)).

5. Who we share it with

Only as far as needed for the purposes above:

  • Payment providers (e.g. Shopier, crypto payment gateways), to take payments,
  • Service providers that fulfil orders, who receive the link you ordered for (not your identity),
  • Email delivery, hosting, security (e.g. Cloudflare) and sign-in (Google) providers,
  • Public authorities, when legally required.

Some of these providers are located outside your country; transfers are made with the safeguards required by applicable law.

6. Cookies and local storage

We use your browser's local storage and strictly necessary cookies to keep you signed in and to remember your language, currency and theme. We do not use advertising or tracking cookies. Cloudflare Turnstile may be used for bot protection.

7. Retention

We keep data while your account is active and afterwards for as long as the law requires (e.g. 10 years for commercial records), then delete or anonymise it.

8. Your rights

You can ask us to:

  • Tell you whether we process your data and give you a copy,
  • Correct inaccurate or incomplete data,
  • Delete your data where the conditions are met,
  • Restrict or object to processing, and receive your data in a portable format,
  • Tell third parties we shared your data with about corrections or deletions.

You can also complain to your local data protection authority.

9. Contact

Requests are answered free of charge within 30 days.