Privacy Policy — Yoomo SMM Panel

1. Introduction

Yoomo ("we", "our", or "us") operates the SMM panel at yoomo.in. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have over it. By registering an account and using our services, you agree to this policy.

2. Data We Collect

Account data: Username, email address, and hashed password (we never store your plain-text password).
Transaction data: Wallet top-up amounts, payment references, order history, and service links you submit.
Device & usage data: IP address, browser type, and pages visited — collected automatically via server logs.
Support data: Messages you send us through the support ticket system.

3. How We Use Your Data

To provide, maintain, and improve our SMM panel services.
To process payments and manage your wallet balance.
To send order status notifications and support replies.
To detect and prevent fraud, abuse, and security threats.
To comply with applicable legal obligations.

We do not sell your personal data to third parties. We do not send unsolicited marketing emails.

4. Data Sharing

We share minimal data with:

SMM service providers (e.g., VipSmmPro, SMMXpert) — only the target URL, quantity, and service ID necessary to execute your order.
Payment gateways (FamGateway, Cryptomus, Binance Pay) — only the transaction amount and reference required to verify payment.
Hosting providers (Render, Vercel) — for infrastructure operation. These providers have their own privacy policies.

5. Cookies & Storage

We use a single HTTP-only cookie to maintain your login session (JWT token). We also use browser sessionStorage to cache the server health status locally (key: yoomo_last_ok). We do not use third-party advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active. Order and payment records are kept for a minimum of 3 years for financial compliance. You may request account deletion by contacting support, but financial transaction records may be retained for legal compliance.

7. Your Rights

Access: Request a copy of the data we hold about you.
Correction: Update inaccurate account information via your Settings page.
Deletion: Request deletion of your account by contacting support.
Portability: Request your order and transaction history in CSV format.

8. Security

We use industry-standard security measures including bcrypt password hashing, HTTPS-only communication, HTTP-only JWT cookies, and server-side input validation. However, no system is 100% secure — please use a strong, unique password and do not share your credentials.

9. Children

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date above. Continued use of Yoomo after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, email us via our support ticket system or visit yoomo.in.