The Smpanel.in Privacy Commitment: We respect your privacy and business confidentiality above all else. We will never sell, lease, monetize, or disclose your client data, submitted URLs, or transaction histories to any third-party marketing entities.
1. Introduction & Regulatory Scope
Smpanel.in is committed to protecting the privacy, security, and integrity of all user data. This Privacy Policy details how we collect, process, store, and safeguard personal information in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Data Collection Inventory: What We Collect & What We NEVER Collect
We operate strictly under a data-minimization standard. We only collect the minimal technical and billing parameters required to maintain your platform wallet and dispatch promotional orders:
A. What Information We Collect
- User Account Identifiers: Your selected platform username, password (stored as a one-way cryptographic hash), and active contact email address.
- Service Fulfillment Parameters: Public profile handles, video URLs, post links, or channel links submitted during order placement, alongside the requested quantity.
- Financial Transaction References: Payment gateway transaction IDs, payment timestamps, deposited rupee amounts, and the 12-digit UTR number generated by your bank or UPI application (PhonePe, Google Pay, Paytm).
- Technical Security Telemetry: Anonymized server logs including IP addresses, browser user agent strings, and request timestamps strictly utilized for DDoS mitigation, rate-limiting, and brute-force intrusion prevention.
B. What Information We STRICTLY NEVER Collect
- Zero Social Media Passwords: We will never ask for, record, or store passwords, OTPs, or session cookies for your Instagram, YouTube, Telegram, TikTok, Facebook, or Twitter accounts.
- Zero Banking Credentials: We never collect, store, or have access to your debit/credit card numbers, CVV codes, net banking passwords, or UPI MPINs. All transactions occur securely on RBI-authorized payment aggregator screens.
- Zero Biometric or Government ID Data: Smpanel.in does not require Aadhaar cards, PAN cards, voter IDs, or biometric scans for standard user registrations.
3. Purpose and Legal Basis for Processing
Your information is processed strictly for legitimate operational purposes:
- To manage, authenticate, and secure your Smpanel.in user dashboard.
- To transmit public target links to server nodes for automated service execution.
- To credit account wallet balances upon confirmed receipt of domestic UPI and net banking deposits.
- To provide timely customer support, process refill warranties, and resolve disputed transactions.
- To defend our web infrastructure against automated credential stuffing, distributed denial-of-service (DDoS) attacks, and fraudulent banking chargebacks.
4. Data Storage, Encryption & Security Standards
We maintain comprehensive technical, physical, and administrative safeguards designed to ensure the highest degree of data security:
- TLS 1.3 Transport Encryption: All communications between your browser, our servers, and payment gateways are encrypted using TLS 1.3 and advanced cryptographic cipher suites.
- One-Way Hashed Passwords: User passwords are encrypted using modern one-way salt-and-hash algorithms (bcrypt/Argon2). No employee or administrator has the ability to view your actual password in plain text.
- Isolated Database Architecture: Production database clusters are protected behind hardened firewalls, SQL injection prevention layers, and strict access controls restricted to authorized technical leads.
5. Third-Party Sharing & Downstream Fulfillers
Smpanel.in does not sell, rent, or trade your personal data. We disclose operational data only under the following tightly constrained circumstances:
- Fulfillment Nodes: When you submit an order, only the public target URL and requested quantity are passed to automated server nodes. No personal account information, usernames, or email addresses are ever shared with fulfillment nodes.
- Payment Gateways: When initiating an add-funds request, transaction details are handled directly by PCI-DSS compliant Indian payment aggregators.
- Legal Mandates: We may disclose information if required to do so by a court of competent jurisdiction or authorized Indian law enforcement agencies pursuant to valid legal summons under the Code of Criminal Procedure or IT Act 2000.
6. Cookies & Local Storage
Our website uses strictly necessary session cookies to maintain your login status, remember your currency preferences, and prevent cross-site request forgery (CSRF) attacks. We do not deploy intrusive third-party cross-site behavioral tracking beacons or sell browsing histories to advertising networks.
7. Data Retention & Account Deletion Rights
Under the Digital Personal Data Protection Act 2023, you maintain comprehensive rights regarding your digital footprint:
- Right to Review & Access: You may inspect your historical orders, payment receipts, and registered profile details at any time from your account dashboard.
- Right to Rectification: You may update your email address or password directly via your profile settings.
- Right to Erasure & Account Termination: You may request complete account deactivation and removal of personal identifiers by submitting a ticket to our privacy desk, provided there are no active chargeback disputes or pending financial audits.
8. Grievance Officer & Contact Details
In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, users may address grievances, privacy complaints, or data questions to our designated Grievance Officer:
- Designation: Data Protection & Grievance Redressal Officer
- Platform: Smpanel.in
- Support Ticket Desk: Open Support Ticket
- Resolution Timeframe: Acknowledged within 24 hours; resolved within 15 business days.