Privacy Policy

1. Who We Are

Resimi ("we", "us", "our") operates the website at https://resimi.xyz. We are a social media marketing panel providing engagement services to individuals and businesses worldwide.

For questions about this Privacy Policy or your personal data, contact us at support@resimi.xyz.

2. Data We Collect

We collect the following categories of personal data:

Category	Data Collected	When
Account Data	Username, email address, hashed password, account creation date	When you register
Order Data	Services ordered, target URLs (social media links you submit), quantities, prices, order status	When you place an order
Payment Data	Transaction IDs, payment amounts, cryptocurrency wallet addresses (if applicable). We do not store card numbers — these are handled by our payment processors	When you add funds
Technical Data	IP address, browser type, device type, session tokens, timestamps	Automatically on each visit
Support Data	Messages, attachments, and communications in support tickets	When you contact support
Social Login Data	If you use Google, Facebook, or TikTok login: your name, email address, and provider user ID. We do not receive your password from these providers	If you choose social login

Data we do NOT collect: We never ask for or store your social media passwords, private messages, or any content from your social media accounts beyond the public profile link you submit for an order.

3. How We Use Your Data

We use your personal data for the following purposes:

Account management — creating and maintaining your account, authentication
Order fulfillment — processing and delivering your orders
Payments — processing deposits and maintaining your balance
Customer support — responding to tickets and resolving issues
Security — detecting and preventing fraud, abuse, and unauthorized access
Communications — sending order confirmations, status updates, and important account notices
Legal compliance — meeting our legal obligations
Service improvement — analyzing aggregate usage patterns to improve our platform (never individual profiling for advertising)

We do not use your data for targeted advertising, sell it to third parties, or use it for automated decision-making that significantly affects you.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contract performance (Art. 6(1)(b) GDPR) — processing necessary to fulfil our contract with you (account creation, order processing, payments)
Legitimate interests (Art. 6(1)(f) GDPR) — security monitoring, fraud prevention, service improvement
Legal obligation (Art. 6(1)(c) GDPR) — compliance with applicable laws
Consent (Art. 6(1)(a) GDPR) — for any optional marketing communications (you can withdraw at any time)

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Service providers (sub-processors) — we share order data (target URLs, quantities) with our SMM service providers (SMMFollows, SMMPanel.net) to fulfil your orders. These providers only receive the minimum data needed to deliver the service
Payment processors — Cryptomus and NexaPay process payments on our behalf. They have their own privacy policies and are responsible for payment data security
Social login providers — if you use Google, Facebook, or TikTok login, data is exchanged with that provider per their terms. We receive only your name, email, and provider ID
Legal requirements — we may disclose data if required by law, court order, or governmental authority
Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

All third parties who process data on our behalf are required to handle it securely and only for the specified purpose.

6. Cookies & Local Storage

We use minimal, essential cookies and browser storage to operate the site:

Name	Purpose	Type	Duration
`PHPSESSID`	Session management — keeps you logged in	Essential	Session
`resimi_currency`	Remembers your preferred display currency	Functional	1 year
`resimi_fx_rates`	Cached exchange rates (reduces API calls)	Functional	1 hour
`ref`	Affiliate referral tracking	Functional	30 days

We do not use advertising cookies, tracking pixels, or any third-party analytics cookies by default. If you enable Google Analytics in your session, Google's own cookies may be set — see Google's Privacy Policy.

Most browsers allow you to refuse or delete cookies through their settings. Disabling the session cookie will prevent you from logging in.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

Account data — retained until you delete your account, plus up to 90 days for backup removal
Order data — retained for 2 years for dispute resolution and legal compliance
Payment records — retained for 7 years to meet financial record-keeping obligations
Support tickets — retained for 1 year after resolution
Technical logs (IP addresses) — retained for up to 90 days for security purposes

After the applicable retention period, data is securely deleted or anonymized.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure ("right to be forgotten") — request deletion of your personal data, subject to legal retention obligations
Right to restriction — request that we limit how we process your data in certain circumstances
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — withdraw any consent you have given at any time
Right to lodge a complaint — complain to your local data protection authority

To exercise any of these rights, contact us at support@resimi.xyz. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are in the EU/EEA and believe we have not addressed your concern, you have the right to lodge a complaint with your national data protection authority.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

HTTPS/TLS encryption for all data in transit
Bcrypt password hashing (passwords are never stored in plain text)
CSRF token protection on all forms
Session security measures to prevent hijacking
Restricted access to personal data on a need-to-know basis

While we implement industry-standard security measures, no system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

10. Children's Privacy

Resimi is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.

11. International Data Transfers

Our servers are located in the United States (via Namecheap hosting). If you are located in the EEA, UK, or other regions with data transfer restrictions, your data may be transferred to and processed in countries that may not have the same level of data protection as your home country.

Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or we rely on adequacy decisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify registered users by email or via an in-panel notice.

Your continued use of Resimi after changes are posted constitutes your acceptance of the revised policy.

13. Contact & Data Protection

For any privacy-related questions, requests, or concerns:

Email: support@resimi.xyz
Support: Discord Support Server
Website: https://resimi.xyz

We aim to respond to all privacy-related requests within 30 days.