Privacy Policy

Effective date: 2026-09-22

This Privacy Policy explains how personal information is handled when you use this SMSocial service. It applies to this deployment of SMSocial and not automatically to every third-party site that may use the SMSocial software.

Who controls your information

Privacy contact: info@smitov.com

Information we may process

• Account and identity information such as email address, display name, handle, profile biography, avatar, cover image and account state.
• Content and social activity such as posts, comments, reactions, shares, saved items, follows, connections, blocks, Groups, Pages, Events, Marketplace listings and RSVPs.
• Private communications and associated attachment metadata when you use SMSocial messaging.
• Notifications and preferences needed to operate your private inbox and account settings.
• Registration, password-recovery, security and anti-abuse data such as short-lived verification state, hashed or encrypted security material, timestamps and limited technical logs.
• Reports and moderation information when content is reported or reviewed for safety, policy enforcement or legal reasons.
• Technical information needed to deliver media and video, including processing status, media metadata and configured storage references.

Why we use information

• To create and operate your account and provide the social features you request.
• To deliver posts, profiles, messages, notifications, media, Groups, Pages, Events and Marketplace features.
• To secure the service, prevent abuse, investigate reports and enforce our rules.
• To maintain, troubleshoot and improve service reliability and accessibility.
• To comply with legal, regulatory, safeguarding and lawful disclosure obligations.
• To send optional marketing only where we have a valid basis to do so; marketing choices are kept separate from essential service communications.

Lawful bases

Depending on the activity, we may rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where consent is specifically required. If information you choose to post contains special-category or highly sensitive data, additional legal conditions may apply and the operator must assess those circumstances separately.

Who may receive information

• Hosting, infrastructure, email-delivery and storage providers used to operate this service.
• Service providers that process information only for defined operational purposes and under appropriate contractual controls.
• Other users where you deliberately publish information or use social features whose purpose is to share it.
• Moderators, authorised administrators, professional advisers, regulators, courts or law-enforcement bodies where access or disclosure is justified or required.

Some suppliers may process information outside the United Kingdom. Where international transfer rules apply, the operator is responsible for using an appropriate transfer mechanism and safeguards.

Retention

• Pending SMSocial registration records expire after approximately 15 minutes and become unusable immediately after expiry.
• Password-reset links are short-lived and expire after approximately 30 minutes.
• Read notifications are normally eligible for cleanup after 90 days and unread notifications after 180 days.
• Account, profile, content, messages and relationship data are generally retained while needed to provide the service, subject to deletion, redaction and retention rules described in the Data Rights page.
• Limited moderation evidence, audit records or ownership records may be retained where necessary for safety, dispute handling, fraud prevention, legal obligations or to preserve the integrity of shared/community records.

Your rights

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection, portability and rights relating to consent and automated decision-making. SMSocial integrates with the WordPress personal-data export and erasure tools, but some records may require review rather than automatic deletion. See Data Rights & Account Deletion for the operational process.

To exercise a privacy right, contact info@smitov.com.

You may also complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

Security and changes

We use layered technical and organisational safeguards, but no online service can guarantee absolute security. We may update this notice when the service, law, providers or processing activities change. Material changes should be communicated in an appropriate way.