प्राइवेसी पॉलिसी

1. Who We Are

Resimi ("we", "us", "our") operates the website at https://resimi.xyz. We are a social media marketing panel providing engagement services to individuals and businesses worldwide.

For questions about this Privacy Policy or your personal data, contact us at support@resimi.xyz.

2. Data We Collect

We collect the following categories of personal data:

Data we do NOT collect: We never ask for or store your social media passwords, private messages, or any content from your social media accounts beyond the public profile link you submit for an order.

3. How We Use Your Data

We use your personal data for the following purposes:

• Account management — creating and maintaining your account, authentication
• Order fulfillment — processing and delivering your orders
• Payments — processing deposits and maintaining your balance
• Customer support — responding to tickets and resolving issues
• Security — detecting and preventing fraud, abuse, and unauthorized access
• Communications — sending order confirmations, status updates, and important account notices
• Legal compliance — meeting our legal obligations
• Service improvement — analyzing aggregate usage patterns to improve our platform (never individual profiling for advertising)

We do not use your data for targeted advertising, sell it to third parties, or use it for automated decision-making that significantly affects you.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) — processing necessary to fulfil our contract with you (account creation, order processing, payments)
• Legitimate interests (Art. 6(1)(f) GDPR) — security monitoring, fraud prevention, service improvement
• Legal obligation (Art. 6(1)(c) GDPR) — compliance with applicable laws
• Consent (Art. 6(1)(a) GDPR) — for any optional marketing communications (you can withdraw at any time)

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Service providers (sub-processors) — we share order data (target URLs, quantities) with our SMM service providers (SMMFollows, SMMPanel.net) to fulfil your orders. These providers only receive the minimum data needed to deliver the service
• Payment processors — Cryptomus and NexaPay process payments on our behalf. They have their own privacy policies and are responsible for payment data security
• Social login providers — if you use Google, Facebook, or TikTok login, data is exchanged with that provider per their terms. We receive only your name, email, and provider ID
• Legal requirements — we may disclose data if required by law, court order, or governmental authority
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

All third parties who process data on our behalf are required to handle it securely and only for the specified purpose.

6. Cookies & Local Storage

We use minimal, essential cookies and browser storage to operate the site:

We do not use advertising cookies, tracking pixels, or any third-party analytics cookies by default. If you enable Google Analytics in your session, Google's own cookies may be set — see Google's Privacy Policy.

Most browsers allow you to refuse or delete cookies through their settings. Disabling the session cookie will prevent you from logging in.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data — retained until you delete your account, plus up to 90 days for backup removal
• Order data — retained for 2 years for dispute resolution and legal compliance
• Payment records — retained for 7 years to meet financial record-keeping obligations
• Support tickets — retained for 1 year after resolution
• Technical logs (IP addresses) — retained for up to 90 days for security purposes

After the applicable retention period, data is securely deleted or anonymized.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your personal data, subject to legal retention obligations
• Right to restriction — request that we limit how we process your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw any consent you have given at any time
• Right to lodge a complaint — complain to your local data protection authority

To exercise any of these rights, contact us at support@resimi.xyz. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are in the EU/EEA and believe we have not addressed your concern, you have the right to lodge a complaint with your national data protection authority.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS/TLS encryption for all data in transit
• Bcrypt password hashing (passwords are never stored in plain text)
• CSRF token protection on all forms
• Session security measures to prevent hijacking
• Restricted access to personal data on a need-to-know basis

While we implement industry-standard security measures, no system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

10. Children's Privacy

Resimi is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.

11. International Data Transfers

Our servers are located in the United States (via Namecheap hosting). If you are located in the EEA, UK, or other regions with data transfer restrictions, your data may be transferred to and processed in countries that may not have the same level of data protection as your home country.

Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or we rely on adequacy decisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify registered users by email or via an in-panel notice.

Your continued use of Resimi after changes are posted constitutes your acceptance of the revised policy.

13. Contact & Data Protection

For any privacy-related questions, requests, or concerns:

• Email: support@resimi.xyz
• Support: Discord Support Server
• Website: https://resimi.xyz

We aim to respond to all privacy-related requests within 30 days.