Privacy Policy — ClashSMM

What Data We Collect

Full name and email address provided during account registration or Google Sign-In.

Account credentials — your password is stored as a securely hashed value and never in plain text.

Payment details — transaction amount and UTR number for UPI/bank payments.

Order history — all SMM orders including service name, target link, quantity, charge and status.

Support tickets and live chat messages, including any images you upload.

Technical data such as IP address, browser type and pages visited via server logs.

To create and manage your ClashSMM account securely.

To process your fund deposits and verify UPI/bank payments before crediting your balance.

To place and track your SMM orders through our third-party API provider.

To provide live chat and ticket-based customer support.

To detect and prevent fraudulent activity and duplicate UTR submissions.

To send important account notifications such as payment approvals or order updates.

To improve our platform and optimize user experience based on usage patterns.

We do NOT sell, rent, or trade your personal information to any third party for marketing purposes.

Order details are shared with our SMM API provider solely to fulfill your orders — no personal account data is shared.

We may disclose data if required by law, a court order, or to protect the rights and safety of ClashSMM.

ClashSMM uses session cookies to keep you logged in securely across pages.

We do not use third-party advertising cookies or tracking pixels.

Session cookies are deleted when you log out or close your browser.

Disabling cookies in your browser may prevent you from logging in properly.

All passwords are hashed using industry-standard bcrypt algorithms — we cannot see or recover your password.

Our platform is served over HTTPS to encrypt all data in transit.

Admin access is protected by a secure password and is completely separate from user accounts.

We regularly review access controls and server configurations to minimise security risks.

Your account data is retained as long as your account remains active.

Order and transaction records are retained for financial and dispute resolution purposes.

If you request account deletion, we will remove your personal data within a reasonable timeframe except where legally required.

You have the right to access the personal data we hold about you at any time.

You may request correction of inaccurate data associated with your account.

You may request deletion of your account and associated data by contacting our support team.

To exercise any of these rights, contact us via live chat or the contact page.

ClashSMM reserves the right to update this Privacy Policy at any time.

Changes will be reflected on this page with an updated effective date.

Continued use of the platform after changes constitutes acceptance of the revised policy.

By creating an account or using clashsmm.xyz, you confirm that you have read, understood and agreed to this policy.