Politique de confidentialité

Effective date: September 14, 2026  ·  Last updated: September 14, 2026

This Privacy Policy explains how AI SMM collects, uses, shares and protects personal data when you visit ai-smm.com, use the web application at app.ai-smm.com, our browser extension, APIs, widgets and related services (together, the “Service”). It also explains the rights you have and how to exercise them.

Contents: 1. Who we are · 2. Our role: controller and processor · 3. Data we collect · 4. How we use data and legal bases · 5. AI features · 6. Connected platforms (each network) · 7. Google and YouTube user data · 8. Browser extension · 9. How we share data · 10. International transfers · 11. Retention · 12. How to delete your data · 13. Your rights · 14. U.S. state privacy rights · 15. Other regions · 16. Cookies · 17. Security · 18. Children · 19. Changes · 20. Contact us

1. Who we are

The Service is operated by Individual Entrepreneur Vladislav Nikolaevich Aksenov, registered in the Russian Federation (Krasnodar), trading as “AI SMM” (“AI SMM”, “we”, “us”, “our”).

We are the data controller within the meaning of the EU and UK General Data Protection Regulation (“GDPR”), the operator of personal data within the meaning of Russian Federal Law No. 152-FZ “On Personal Data”, and a business within the meaning of U.S. state privacy laws, to the extent those laws apply to us.

Privacy contact: info@ai-smm.com (please write “Privacy” in the subject line).

Representatives. We have authorized local representatives in the European Union, the United Kingdom and other countries where the law requires it (including representatives under Article 27 of the EU GDPR and UK GDPR). Their contact details are provided on request at info@ai-smm.com. You may contact us directly or through the representative for your country on any matter related to the processing of your personal data. We comply with the data protection laws of each country in which we offer the Service.

2. Our role: controller and processor

We are the controller for data about our own users and website visitors: your account, billing, support requests, usage of the Service and the social accounts you connect.

We are a processor (service provider) for personal data that our customers upload or collect through the Service about their own audiences — for example, messages and contact details of people who write to a customer’s social pages, live-chat visitors, online-store buyers, email and push subscribers, and leads collected through pop-up forms. In that case the customer (the business using AI SMM) is the controller, decides why and how that data is processed and is responsible for informing those people and obtaining any required consent. We process such data only on the customer’s instructions and under the data processing terms in our User Agreement. If you are a customer’s contact and want to exercise your rights, please contact that business first; we will assist it.

3. Data we collect

3.1 Data you give us

• Account data: name, username, email address, password (stored only as a hash), language, time zone, team membership and roles, two-factor authentication settings.
• Business profile data: company name, website, brand description, tone of voice, products, target audience, competitors and keywords that you add so the Service can create relevant content.
• Content: posts, captions, images, videos, files, prompts, comments, replies, templates, knowledge-base articles, link-in-bio pages, store catalogs and other material you create, upload or import.
• Billing data: selected plan, payment history, invoices, billing name, country and, for businesses, tax details. Card numbers are entered on the payment provider’s page; we never receive or store full card numbers or CVV codes.
• Communications: support requests, feedback, survey answers and the contents of emails you send us.

3.2 Data from platforms you connect

When you connect a social network, messenger, website or other service, we receive only the data covered by the permissions you approve on that platform’s own authorization screen, together with access tokens that let us act on your behalf. Details by platform are in Section 6 and, for Google and YouTube, Section 7.

3.3 Data collected automatically

• Device and log data: IP address, browser and operating system type, device identifiers, referring URL, pages viewed, date and time of requests, error logs.
• Usage data: features used, actions taken in the Service, AI credit consumption, performance and diagnostic data.
• Cookies and similar technologies: see Section 16.

3.4 Data from other sources

• Sign-in providers (for example, Google or X) when you choose to sign in with them: name, email address and profile picture.
• Publicly available information that you ask the Service to analyze — for example, public posts and public comments on the pages of competitors or on topics you track, and public information on business websites you enter. We collect only what is needed for the analysis you request, we do not collect follower lists, and we do not build profiles of individual people.
• Payment providers: confirmation of payment status, the last digits and type of card, and fraud-prevention signals.

We do not intentionally collect special categories of personal data (such as health, racial or ethnic origin, political opinions, religious beliefs, biometric or genetic data). Please do not upload such data unless you have a lawful basis to do so.

4. How we use data and legal bases

We use personal data only for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the legal basis for each purpose is indicated in the table.

Where we rely on legitimate interests, we have balanced those interests against your rights; you can ask us for details. Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal. Under Russian law, we process data to perform the contract with you, on the basis of your consent, and where required by law.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

5. AI features

• To generate text, images, video, voice, translations, reply suggestions and analytics insights, the Service sends the content needed for the specific task (for example, your prompt, brand description, post draft or the message you are replying to) to AI model providers — OpenAI and Google (Gemini API) — and to media-generation infrastructure such as fal.ai.
• We use these providers under business API terms under which your inputs and outputs are not used to train their models. Providers may keep API data for a limited period (typically up to 30 days) solely to detect abuse, after which it is deleted.
• We do not use your content, your contacts’ data or any data received from connected platforms to train or fine-tune AI models. We may learn from your own edits (for example, which reply you usually send) only to personalize suggestions inside your own workspace.
• AI output can be inaccurate or incomplete. Always review it before publishing. You are responsible for disclosing that content is AI-generated where the law or a platform’s rules require it.

6. Connected platforms: how we work with each one

You decide which accounts to connect and can disconnect them at any time. The rules below apply to every platform:

• We receive only the data covered by the permissions you approve (or the credentials you provide), and we use it only for the features you use: showing the connected account, publishing and scheduling content you create, receiving and answering comments and messages in the Inbox where supported, and showing analytics.
• We act on a platform (publish, reply, delete, like, follow and similar actions) only when you or your team start that action or set up an automation that does so.
• We do not sell platform data, do not use it for advertising, do not use it to build profiles of individual people or to make eligibility decisions, do not use it to train AI models, and do not share it except with the service providers that operate the Service (Section 9) or where the law requires.
• Access tokens and session data are stored on our servers with restricted access and are deleted when you disconnect the account (Section 12).
• Your use of each platform remains subject to its own terms and privacy policy. Deleting data in AI SMM does not delete content already published on the platform.

6.1 Facebook Pages (Meta)

• How we connect: Facebook Login for Business (official Meta Graph API).
• Permissions requested: pages_show_list, pages_read_engagement, pages_manage_posts, business_management.
• Data we access: your Facebook user ID and name; the list of Pages and business assets you manage; Page name, ID, picture, category and follower count; posts published on the Page and their engagement (reactions, comments and shares counts).
• What we do with it: let you choose which Pages to connect, publish and schedule posts (text, links, photos, videos, reels) to those Pages, and show Page and post analytics.
• What we do not do: we do not access your personal profile timeline, friends list or Messenger conversations, and we do not post to your personal profile.
• Your controls: delete the channel in AI SMM, or on Facebook go to Settings & privacy → Settings → Business integrations (or Apps and websites) and remove AI SMM.
• Platform terms: Meta Terms, Meta Privacy Policy.

6.2 Instagram professional accounts (Meta)

• How we connect: through the Facebook Page linked to your Instagram professional (business or creator) account, using the official Instagram Graph API.
• Permissions requested: instagram_basic, instagram_content_publish, pages_read_engagement, pages_show_list, business_management.
• Data we access: Instagram account ID, username, name, profile picture, biography, follower and media counts; your media (posts, reels, carousels) with captions, timestamps, like and comment counts.
• What we do with it: publish and schedule posts, reels and carousels you create, show your published media and analytics.
• What we do not do: we do not access Instagram direct messages or the accounts of your followers.
• Your controls: delete the channel in AI SMM, or in Instagram go to Settings → Website permissions → Apps and websites and remove AI SMM; you can also remove AI SMM from the linked Facebook Page’s business integrations.
• Platform terms: Instagram Terms of Use.

6.3 Threads (Meta)

• How we connect: official Threads API with Threads login.
• Permissions requested: threads_basic, threads_content_publish, threads_manage_insights; and, if you enable the Inbox and discovery features and Meta has approved them, threads_read_replies, threads_manage_replies, threads_manage_mentions and threads_keyword_search.
• Data we access: Threads user ID, username, name, profile picture and biography; your threads and their insights (views, likes, replies, reposts, quotes); replies to your threads and posts that mention you; public posts that match the keywords you set.
• What we do with it: publish and schedule your threads; show analytics; show replies and mentions in the Inbox so you can answer them; find public conversations on your chosen topics and, only when you click to do so, publish your reply.
• What we do not do: we do not reply automatically without your action, and we do not store keyword search results about people for any purpose other than showing them to you.
• Your controls: delete the channel in AI SMM, or in Threads go to Settings → Account → Website permissions and remove AI SMM.
• Platform terms: Threads Terms of Use.

6.4 TikTok

• How we connect: TikTok Login Kit and official TikTok APIs (Content Posting API, Display API and, if you request a transfer, Data Portability API).
• Permissions requested: user.info.basic, user.info.profile, user.info.stats, video.list, video.upload, video.publish.
• Data we access: open ID, display name and avatar; username, bio, profile link and verification status; follower, following, likes and video counts; your public videos and their metrics; and, where you request a transfer through TikTok’s Data Portability API, a copy of your posts and profile data.
• What we do with it: upload and publish videos you create (or send them to your TikTok drafts), show your videos and analytics, and move your content between platforms when you ask.
• Your controls: delete the channel in AI SMM, or in the TikTok app go to Settings and privacy → Security and permissions → Apps and services permissions and remove AI SMM.
• Platform terms: TikTok Terms of Service, TikTok Privacy Policy.

6.5 YouTube, Google Business Profile and other Google products

We connect through official Google APIs, including YouTube API Services. The data we access, how we use it, the Limited Use commitments and how to revoke access are described in Section 7.

6.6 X (Twitter)

• How we connect: official X API with OAuth 2.0; you can also sign in to AI SMM with X.
• Permissions requested: tweet.read, tweet.write, tweet.moderate.write, users.read, users.email, media.write, offline.access, and read/write permissions for follows, likes, lists, bookmarks, mutes, blocks and Spaces.
• Data we access: user ID, name, username, profile picture, email address (for sign-in); your posts and their public metrics; replies and mentions of your account.
• What we do with it: publish and schedule posts, threads and media; show analytics; show replies and mentions in the Inbox and publish your answers; hide replies when you choose to.
• What we do not do: although X groups these permissions together, we do not follow, like, bookmark, mute or block accounts, or change your lists, unless you explicitly start that action. We do not access X direct messages.
• Your controls: delete the channel in AI SMM, or on X go to Settings and privacy → Security and account access → Apps and sessions → Connected apps and revoke AI SMM.
• Platform terms: X Terms of Service.

6.7 LinkedIn (profiles and company pages)

• How we connect: official LinkedIn APIs with “Sign In with LinkedIn using OpenID Connect”, “Share on LinkedIn” and the Community Management API.
• Permissions requested: for a personal profile — openid, profile, email, w_member_social; for company pages — w_organization_social, r_organization_social, rw_organization_admin.
• Data we access: your LinkedIn member ID, name, profile picture and email address; the company pages you administer; posts on those pages and their statistics (impressions, clicks, reactions, comments, shares, followers).
• What we do with it: publish and schedule posts to your profile or company pages and show page analytics.
• What we do not do: we do not access your connections, LinkedIn messages or other members’ profiles.
• Your controls: delete the channel in AI SMM, or on LinkedIn go to Settings → Data privacy → Other applications → Permitted services and remove AI SMM.
• Platform terms: LinkedIn User Agreement.

6.8 Pinterest

• How we connect: official Pinterest API v5 with OAuth.
• Permissions requested: user_accounts:read, boards:read, pins:read, pins:write.
• Data we access: username, profile picture and account type; your boards; your pins and their analytics.
• What we do with it: create and schedule pins on the boards you choose and show pin analytics.
• Your controls: delete the channel in AI SMM, or in Pinterest go to Settings → Security and logins → Apps (connected apps) and revoke AI SMM.
• Platform terms: Pinterest Terms of Service.

6.9 Reddit

• How we connect: official Reddit API with OAuth.
• Permissions requested: identity, mysubreddits, read, history, submit, edit, flair, privatemessages, save, subscribe, vote, report, wikiread, wikiedit and moderator permissions (modposts, modconfig, modflair, modlog, modwiki).
• Data we access: username, karma and account creation date; subreddits you belong to or moderate; your posts and comments with their scores; replies and private messages sent to your account.
• What we do with it: submit and schedule posts to subreddits you choose, set flair, show post performance, and — where available — show replies and messages so you can answer them. Moderator permissions are used only for subreddits you moderate and only for actions you take in the Service.
• What we do not do: we do not vote, subscribe, save or report content unless you start that action.
• Your controls: delete the channel in AI SMM, or on Reddit open User settings → Safety & privacy → Authorized apps (reddit.com/prefs/apps) and revoke access.
• Platform terms: Reddit User Agreement.

6.10 Telegram

• How we connect: through a Telegram bot. You either add your own bot (created via @BotFather) by entering its token, or add our bot as an administrator of your channel or group. You can also link your Telegram account with the Telegram Login widget to receive notifications and approve posts.
• Data we access: bot token; IDs, titles and usernames of the channels and groups where the bot is an administrator; messages sent to the bot and messages in groups the bot can read, with the sender’s Telegram ID, name, username and attached media; for Telegram Login — your Telegram ID, name, username and profile photo.
• What we do with it: publish and schedule posts in your channels and groups, show messages in the Inbox and send your replies, send you notifications and approval requests.
• Your controls: delete the channel in AI SMM; remove the bot from your channel or group; revoke your bot’s token via @BotFather; for Telegram Login, go to Settings → Privacy and Security → Active sessions / Logged in with Telegram and disconnect AI SMM.
• Platform terms: Telegram Terms of Service, Bot Platform terms.

6.11 Discord

• How we connect: by adding a bot to your server (OAuth scope bot) and/or by using a channel webhook URL you create.
• Data we access: server and channel names and IDs; messages in channels the bot is allowed to read and messages sent to the bot, with the author’s Discord user ID, username and avatar; the webhook URL.
• What we do with it: publish posts to your channels, show messages in the Inbox and send your replies.
• Your controls: delete the channel in AI SMM; remove the bot in Server Settings → Integrations; delete the webhook in Channel Settings → Integrations → Webhooks.
• Platform terms: Discord Terms of Service.

6.12 Bluesky

• How we connect: AT Protocol with your handle and an app password that you create in Bluesky (never your main password).
• Data we access: DID, handle, display name, avatar; your posts and their counts of likes, reposts and replies; notifications such as replies and mentions; and, if you allow direct-message access for the app password, your Bluesky chats.
• What we do with it: publish and schedule posts, show analytics, show replies, mentions and messages in the Inbox and send your answers. The app password is stored only to renew the session.
• Your controls: delete the channel in AI SMM, or in Bluesky go to Settings → Privacy and security → App passwords and delete the app password.
• Platform terms: Bluesky Terms of Service.

6.13 Mastodon

• How we connect: OAuth with the Mastodon server (instance) you use.
• Permissions requested: profile, read:accounts, read:statuses, read:search, write:accounts, write:statuses, write:media.
• Data we access: account ID, username, display name, avatar and server; your posts and their counts of favourites, boosts and replies; replies and mentions of your account.
• What we do with it: publish and schedule posts with media, show analytics, show replies and mentions in the Inbox and send your answers.
• Your controls: delete the channel in AI SMM, or on your Mastodon server go to Preferences → Account → Authorized apps and revoke AI SMM.

6.14 Odnoklassniki (OK.ru)

• How we connect: official OK API with OAuth.
• Permissions requested: VALUABLE_ACCESS, PHOTO_CONTENT, GROUP_CONTENT, LONG_ACCESS_TOKEN.
• Data we access: user ID, name and avatar; the groups you administer; posts and photos in those groups and their statistics.
• What we do with it: publish and schedule posts and photos to your groups and show group analytics.
• Your controls: delete the channel in AI SMM, or on OK.ru open Settings → Apps (third-party applications) and remove AI SMM.

6.15 Email (IMAP / SMTP)

• How we connect: with the mail server address, login and password (or app password) you enter.
• Data we access: emails in the folders you select (sender, recipients, subject, body, attachments) and the credentials needed to access the mailbox.
• What we do with it: show emails in the Inbox, send your replies and newsletters, and suggest answers when you ask.
• Your controls: delete the mailbox in AI SMM; change the password or revoke the app password with your email provider.

6.16 Websites, SEO services and file tools

• WordPress and other websites: the site address and the access key or application password you provide; used to publish and update posts, pages and images you create. Revoke by deleting the connection in AI SMM or removing the plugin key / application password in your site admin.
• Yandex Webmaster and Yandex Metrica: OAuth permissions webmaster:hostinfo, webmaster:verify, metrika:read, metrika:write; used to list your sites, show search queries, positions and traffic, add and verify your site, and create a Metrica counter if you have none. Revoke in your Yandex ID settings (Data access).
• Google Drive, Dropbox, Canva and Adobe Express: basic account information and only the files or designs you choose to import or export. Revoke in the security or connected-apps settings of the respective service.

7. Google and YouTube user data

The Service uses Google APIs, including YouTube API Services, when you choose to sign in with Google or connect a Google product.

YouTube. By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service. Google’s processing of your data is described in the Google Privacy Policy. The Service does not serve third-party advertising.

Revoking access. You can disconnect a Google or YouTube account at any time in the Service (Channels → select the account → Delete) or revoke AI SMM’s access in your Google Account permissions (also available at security.google.com/settings/security/permissions). When you disconnect an account in the Service, we delete the related tokens and stored API data immediately and in any case within 7 days. When you revoke access through Google, we stop accessing the data at once and delete stored API data within 30 days. Statistics that we keep while an account stays connected are refreshed or deleted at least every 30 days as required by the YouTube API Services policies.

8. Browser extension

The optional AI SMM browser extension performs tasks that you start in the Service — for example, publishing a post, opening a page to set up an integration, or collecting public comments from a page you chose to analyze.

• It acts only in the tabs and windows it opens for those tasks. It does not collect your general browsing history, does not read pages you browse on your own, and does not collect passwords, payment details or the contents of private messages outside the tasks you start.
• It stops and asks you to act when a page requires sign-in or a CAPTCHA.
• Data collected for a task is sent only to your AI SMM account over an encrypted connection and is used only for that task.
• The use of information received from the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

9. How we share data

We do not sell personal data and do not share it for cross-context behavioral advertising. We share personal data only as follows:

• Service providers (sub-processors) that process data on our behalf under contracts that require confidentiality and security and prohibit using the data for their own purposes:

• Platforms you connect, when you instruct the Service to publish, reply or otherwise act on those platforms.
• Your team and your clients: members of a workspace you invite, and people you share approval links or public pages with, can see the content you share with them.
• Legal requirements: public authorities, courts or law enforcement where we are legally required to, and to protect the rights, property or safety of our users, the public or AI SMM. Where permitted, we will tell you about such a request.
• Business transfers: a successor in the event of a merger, acquisition, reorganization or sale of assets, subject to this Policy; we will notify you before your data becomes subject to a different privacy policy.
• With your consent or at your direction.

An up-to-date list of sub-processors is available on request at info@ai-smm.com.

10. International transfers

AI SMM is operated from the Russian Federation, our servers are located in Germany, and some service providers are located in the United States and other countries. Your data may therefore be processed outside your country, including in countries that may not provide the same level of data protection.

• For personal data of individuals in the EEA, the UK and Switzerland, we rely on adequacy decisions where available (for example, for recipients certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions), or on the European Commission’s Standard Contractual Clauses (and the UK Addendum) together with supplementary measures, or, where these are not available, on the necessity of the transfer to perform our contract with you (Art. 49(1)(b) GDPR).
• For cross-border transfers of personal data subject to Russian law, we comply with the requirements of Federal Law No. 152-FZ, including transfers to countries that provide adequate protection of the rights of data subjects and, for other countries, transfers necessary to perform the contract with you or made with your consent.

You can ask us for a copy of the safeguards we use by writing to info@ai-smm.com.

11. Retention

We keep personal data only as long as necessary for the purposes described in this Policy:

We may keep data longer where required by law or needed to establish, exercise or defend legal claims, and we may keep anonymized, aggregated statistics that no longer identify you.

12. How to delete your data

These instructions apply to all users worldwide and to data received from any connected platform, including Facebook, Instagram, Threads, TikTok, Google and YouTube.

1. Disconnect a channel in the Service: open Channels, select the account and choose Delete. The access tokens, profile data, posts metadata and analytics collected for that account are deleted from our active systems immediately.
2. Revoke access on the platform:
   • Facebook: Settings & privacy → Settings → Apps and websites → remove AI SMM. Instagram: Settings → Website permissions → Apps and websites → remove AI SMM. Threads: Settings → Account → Website permissions → remove AI SMM.
   • TikTok: Settings and privacy → Security and permissions → Apps and services permissions → remove AI SMM.
   • Google and YouTube: myaccount.google.com/connections → AI SMM → Delete all connections.
   • X, LinkedIn, Pinterest, Reddit, Telegram, Discord, Bluesky, Mastodon, OK and other connections: follow the “Your controls” instructions for that platform in Section 6.
   We stop receiving data immediately. Stored data is deleted when you disconnect the channel in the Service or, if you do not, within 30 days after we detect that access was revoked.
3. Delete your account or specific data by email: write to info@ai-smm.com from the email address of your account with the subject “Data deletion request”, and tell us whether you want to delete your whole account or only data from a specific platform. We confirm receipt, may ask you to verify your identity, and complete the request within 30 days. You can use the same address to check the status of your request.

Copies in encrypted backups are overwritten within 90 days. We may retain limited information where the law requires it (for example, invoices). Deleting data in AI SMM does not delete content you have already published on a platform — delete it on that platform.

13. Your rights

Depending on where you live, you have some or all of the following rights:

• Access — to know whether we process your data and to receive a copy;
• Rectification — to correct inaccurate or incomplete data;
• Erasure — to have your data deleted;
• Restriction — to limit how we use your data;
• Portability — to receive data you provided in a structured, machine-readable format and to have it transmitted to another controller;
• Objection — to object to processing based on legitimate interests, and at any time to direct marketing;
• Withdrawal of consent — at any time, without affecting earlier processing;
• Not to be subject to solely automated decisions with legal or similarly significant effects;
• Complaint — to lodge a complaint with a data protection authority, in particular in the country where you live or work or where an alleged infringement took place (in Russia — Roskomnadzor).

How to exercise your rights. You can contact us directly or through our local representative in your country (contact details on request). Most account data can be viewed and edited in your account settings. For any other request, email info@ai-smm.com. We will respond within one month (GDPR), 45 days (U.S. state laws) or 10 working days (152-FZ), or within any shorter period required by applicable law; where the law allows, we may extend this period and will tell you why. To protect your data, we may ask you to verify your identity, normally by confirming control of the email address on your account. Requests are free of charge unless they are manifestly unfounded or excessive. We will not discriminate against you for exercising your rights.

14. U.S. state privacy rights

This section applies to residents of California and other U.S. states with comprehensive consumer privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia), to the extent those laws apply to us.

Categories of personal information collected in the last 12 months: identifiers (name, email, IP address, account IDs); customer records (billing details); commercial information (plans purchased); internet or network activity (usage and log data); audio, visual or similar information (images, videos and voice you upload or generate); professional information (business profile); and inferences limited to content preferences within your workspace. Sources, purposes and recipients are described in Sections 3, 4 and 9. We disclose these categories to service providers for business purposes only.

Sensitive personal information: we collect account login credentials only to let you access your account, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit its use.

Sale, sharing and targeted advertising: we do not sell personal information, do not share it for cross-context behavioral advertising, and do not process it for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects. We have no actual knowledge of selling or sharing personal information of consumers under 16. If this changes, we will update this Policy, provide a “Do Not Sell or Share” option and honor Global Privacy Control signals.

Your rights: to know and access, to delete, to correct, to data portability, and to opt out of sale, sharing, targeted advertising and profiling. You can submit a request by email to info@ai-smm.com. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to verify your identity. If we deny your request, you may appeal by replying to our decision with the subject “Appeal”; we will respond within the period required by your state’s law, and if you remain unsatisfied you may contact your state Attorney General.

Retention: see Section 11. Financial incentives: we do not offer financial incentives in exchange for personal information. Shine the Light: we do not disclose personal information to third parties for their direct marketing purposes.

15. Other regions

• EEA, UK and Switzerland: the legal bases and rights described above apply. Our EU and UK representatives under Article 27 GDPR can be contacted through info@ai-smm.com, where we will provide their details. You can contact your local supervisory authority; a list of EU authorities is available on the European Data Protection Board website.
• Russian Federation: we process personal data in accordance with Federal Law No. 152-FZ. By accepting this Policy when registering, you give your consent to the processing of your personal data for the purposes and on the terms described here, including cross-border transfer described in Section 10. You may withdraw consent by writing to us; we may then continue processing only where another legal basis exists.
• Brazil (LGPD): you have the rights listed in Article 18 of the LGPD, including confirmation of processing, anonymization, information about sharing, and review of automated decisions. You may also complain to the ANPD.
• Canada (PIPEDA and Quebec Law 25): you may access and correct your data and withdraw consent, subject to legal and contractual restrictions. Complaints may be submitted to the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec.
• India (DPDP Act): you may access, correct and erase your data, nominate another person to exercise your rights, and seek grievance redressal by contacting us before approaching the Data Protection Board of India.
• Australia, New Zealand, Japan, South Korea, Singapore and other countries: you have the rights granted by your local data protection law, which we will honor. Please contact us to exercise them.

16. Cookies and similar technologies

We do not use advertising or retargeting cookies. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on. Blocking strictly necessary cookies may prevent the Service from working. Live-chat widgets, pop-ups and push-notification scripts that our customers install on their own websites are controlled by those customers, who are responsible for obtaining any consent required on their sites.

17. Security

We protect personal data with administrative, technical and physical measures appropriate to the risk, including encryption in transit (TLS), hashing of passwords, restricted storage of access tokens and other credentials, role-based access controls, optional two-factor authentication, network firewalls, logging and monitoring, regular backups and limiting staff access to what is necessary. No system is completely secure; if you believe your account has been compromised, contact us immediately. If a personal data breach occurs, we will notify the competent authorities and affected users where and when the law requires it (under the GDPR, the authority within 72 hours where required; under 152-FZ, Roskomnadzor within 24 hours).

18. Children

The Service is a business tool and is not directed to children. You must be at least 18 years old (or the age of majority in your country) to create an account. We do not knowingly collect personal data from children under 16, or under 13 in the United States. If you believe a child has provided us with personal data, contact us and we will delete it.

19. Changes to this Policy

We may update this Policy to reflect changes in the Service or the law. We will post the updated version on this page and change the “Last updated” date. If changes are material, we will notify you by email or through a notice in the Service at least 14 days before they take effect, except where a change is required by law sooner. Where the law requires your consent to a change, we will ask for it.

20. Contact us

Individual Entrepreneur Vladislav Nikolaevich Aksenov (AI SMM)
Krasnodar, Russian Federation
Email: info@ai-smm.com
Website: https://ai-smm.com · Contact form

Local representatives (EU, UK and other countries): contact details on request at info@ai-smm.com.

Related documents: User Agreement · Terms of Service · Refund Policy