Terms

LavaSMM Personal Data Processing Policy

Version dated 06.11.2026. Effective from 06.11.2026.

1. General Provisions

1.1. This Policy describes what data the administration of the LavaSMM service, website lavasmm.com (the Administration), collects, why it uses that data, and what rights users of the Website (each a User) have.

1.2. This Policy applies to the use of lavasmm.com, including all its language versions and API (the Website).

1.3. Public offer. By agreeing to this Policy, the User also agrees to the terms of the public offer.

1.4. A User who does not agree with this Policy must not register on the Website or provide data to the Administration.

1.5. The Website is intended for persons over 18. If the Administration learns that a minor has provided data, it will delete that data unless the law requires it to be kept.

2. What Data We Collect

2.1. Registration data: username, email address, password.

2.2. Order and balance data: order numbers and parameters, links to order objects, and top-up and spending history.

2.3. Payment data: payment amount, date, method and status, and transaction ID. Bank card details are entered on the payment service's side, and the Administration does not receive them.

2.4. Support requests: correspondence with support and any information the User provides.

2.5. Technical data: IP address, browser and device information, date and time of visits, and cookies.

2.6. A User who provides the data of other people, for example in links or support requests, confirms that they are entitled to do so.

3. Why We Use Data

3.1. The Administration uses data to:

(a) register the User and operate the account area and API;

(b) fulfill orders and show their status;

(d) respond to requests and send messages about orders, the balance and changes to documents;

(e) protect the Website and detect fraud and abuse;

(f) fix errors and improve the Website;

(g) comply with applicable law.

3.2. The Administration sends marketing emails only with the User's separate consent. The User can opt out using the link in the email or by writing to lav@lavasmm.com.

4. Legal Grounds for Processing

The Administration processes data on the following grounds:

(a) the User's consent;

(b) the need to conclude and perform a contract with the User;

(d) a legitimate interest in protecting the Website and Users from fraud and abuse.

5. Who We Share Data With

5.1. The Administration does not sell Users' data.

5.2. Data may be received, only to the extent necessary, by:

(a) payment services, to process payments and refunds;

(b) service providers, to fulfill an order, usually the link to the order object and the order parameters;

(d) public authorities and other persons where required by applicable law, and to protect the Administration's rights in a dispute.

5.3. These recipients may be located in various countries, including outside the User's country of residence, and the laws of those countries may provide a different level of data protection. By using the Website, the User acknowledges such transfers.

6. Cookies

6.1. The Website uses cookies to enable account login, remember language and settings, and protect the Website.

6.2. The User can limit or delete cookies in the browser settings. Some Website features, including account login, may then stop working.

7. How Long We Keep Data

7.1. Account data is kept for as long as the account exists and for 3 years after its deletion, in order to resolve disputes.

7.2. Order and payment data is kept for 5 years, or longer if required by applicable law.

7.3. Support requests are kept for 3 years after they are closed. Technical data is kept for 12 months.

7.4. When these periods end, the data is deleted or anonymized.

8. Data Protection

8.1. The Administration applies organizational and technical safeguards, including data transfer over a secure HTTPS connection and restricted access to data.

8.2. No system can be fully secure. The User is responsible for keeping their password and API key safe and tells the Administration if access to them is lost.

8.3. If a data breach creates a risk for Users, the Administration notifies them and the competent authorities where applicable law requires it.

9. User Rights

9.1. The User has the right to:

(a) find out what data about them is processed and receive a copy;

(b) correct inaccurate data;

(d) withdraw consent and opt out of marketing emails;

(e) object to the processing of data;

(f) file a complaint with the competent authority in their country.

9.2. Requests are sent to lav@lavasmm.com from the email address specified in the account. The Administration responds within 30 calendar days and may ask for confirmation that the request was sent by the User.

9.3. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. The Administration may continue to keep data if applicable law requires it or if the data is needed to resolve a dispute. Without registration and order data, the User cannot use the account area or order services.

10. Changes to This Policy

The Administration may change this Policy by publishing a new version on the Website at least 10 calendar days before it takes effect. Users are notified of significant changes by email.

11. Contact

Email: lav@lavasmm.com Website: lavasmm.com