Pump It SocialPrivacy policy
Last updated September 1, 2026
This policy explains how personal data collected through SocialUpZone is handled. Your rights under GDPR and KVKK are set out below.
Data controller: INAPPTO YAZILIM TASARIM BİLİŞİM REKLAM TEKNOLOJİ DANIŞMANLIK VE TİCARET LİMİTED ŞİRKETİ Contact: info@inappto.com.tr
1. What we collect
| Data | Why |
|---|---|
| Email address | Order tracking, status notifications, support correspondence |
| Order link (profile or post URL) | Required to pass the order to the provider |
| Order content (comment text, username lists, etc.) | To deliver the service requested |
| IP address and browser information | Fraud prevention, abuse detection, security logs |
| Name (if you hold an account) | Identifying your account, addressing you in support replies |
| Payment records | Verifying payment and accounting |
Your card details never reach us. Payment is completed on the payment provider's own page; we store only the payment's status, amount and the provider's reference.
2. Who we share it with
- SMM providers: the target link and quantity are passed to the relevant provider so the order can be delivered. Your email address is not.
- Payment providers: the minimum needed to process payment.
- Hosting and infrastructure providers: server and database services.
Your data is never sold or rented to third parties for marketing.
3. Retention
- Order and payment records: for as long as accounting law requires (10 years).
- Security logs (IP, browser information): 12 months.
- Support correspondence: 24 months after the request is closed.
- Account data: until the account is deleted.
4. Cookies
Only cookies strictly necessary for the service: the session cookie (if you are signed in), your language preference and your theme preference. No advertising or profiling cookies are used.
5. Your rights
You have the right to:
- Access your data and request a copy
- Have inaccurate data corrected
- Request erasure (subject to legal retention obligations)
- Object to processing
- Receive your data in a portable format
Send requests to info@inappto.com.tr. We respond within 30 days at the latest.
6. Security
Provider API keys are stored encrypted (AES-256-GCM). Passwords are irreversibly hashed. Access to the admin panel is role-based and supports two-factor authentication.
7. Changes
This policy may be updated; the current text is always published on this page.