This policy explains how SMC Terminal (“SMC Terminal”, “we”) handles personal data when you use https://smcterminal.com, the terminal and related services. We keep it short and specific to what the Service actually does.
1. What we collect
Account data
- Name, email address, country and (optionally) a WhatsApp number, given at sign-up or on your account page.
- A password, stored only as a salted hash — we cannot read it.
- An avatar image if you upload one.
- Verification codes sent by email at sign-up, login on a new device and password reset, and a record of devices you choose to trust.
Subscription data
- Your plan, billing interval, subscription status, renewal date and the identifiers our payment provider assigns to your customer and subscription.
- Invoice records: amount, currency, date and status.
- We never receive or store your card number or bank details. Payment is taken by Paddle, the merchant of record, on its own pages. See Paddle's privacy policy.
Usage data
- Server logs: IP address, browser type, pages and endpoints requested, timestamps — kept for security and troubleshooting.
- Your selected market, tab and display preferences, stored in your browser (local storage) so the terminal opens where you left it.
- Questions you send to the AI Analyzer and the answers returned, plus the credits used, so the allowance can be metered and problems investigated.
Community data
- If you connect Discord: your Discord user id and username, so member roles can be assigned and removed automatically.
- If you join a live session: whatever you choose to share in it.
We do not collect special-category data and we do not profile you for advertising.
2. Why we use it (and the legal basis)
- To provide the Service you asked for — accounts, access to the plan you bought, the AI Analyzer, Discord roles (performance of a contract).
- To keep accounts secure — verification codes, trusted devices, logs, abuse detection (legitimate interest in security).
- To bill and keep records — subscription and invoice data (contract and legal obligation).
- To tell you about the Service — transactional emails such as receipts, renewal and payment-failure notices, welcome and important changes (contract). We do not send marketing email unless you opt in, and you can opt out at any time.
- To improve the Service — aggregate usage, which modules are used, errors (legitimate interest).
3. Who we share it with
We share personal data only with providers that help us run the Service, under contracts that restrict their use of it:
- Paddle (merchant of record): your email and name to create the checkout and the subscription, and the subscription status back to us.
- Hosting and email delivery (currently Hostinger): the servers that run the Service and the mailbox that sends verification codes and receipts.
- Anthropic: the text of your AI Analyzer questions, together with the market data needed to answer them, is sent to the language-model provider to generate the reply. We do not send your name or email with it.
- Discord: your Discord id, when you connect it, to manage roles on our server.
- Authorities, where the law requires it.
We do not sell personal data, and we do not share it with advertisers. Market data providers (exchanges, government agencies, sentiment feeds) receive no personal data from us.
4. International transfers
Our providers process data in several countries, including the United States and the European Union. Where data leaves the country you live in we rely on the provider's standard contractual safeguards.
5. How long we keep it
- Account data: for as long as your account exists, then deleted or anonymised within 30 days of closure, except where we must keep it longer.
- Invoice and subscription records: for the period required by tax and accounting law (typically up to 7 years).
- Verification codes: minutes. Trusted-device records: 30 days of inactivity.
- Server logs: up to 90 days.
- AI Analyzer history: for as long as your account exists, or earlier on request.
6. Cookies and local storage
The Service uses a session token and a small number of browser-storage keys that are strictly necessary for login and your preferences (theme, selected market, collapsed panels). The public site uses Google Analytics 4 to measure how it is used (pages viewed, approximate region, device and browser type); Google Analytics 4 does not store IP addresses, and we use it only for aggregate statistics. We do not use advertising or cross-site tracking cookies. Embedded YouTube recordings on the live-sessions page are loaded from YouTube and are subject to Google's policies when you play them.
7. Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict some processing, and to complain to a supervisory authority. To exercise any of these:
- Update your details on your account page.
- Email support@smcterminal.com from the address on your account for export or deletion. We respond within 30 days.
Deleting your account ends any active subscription; invoice records are retained as described above.
8. Security
Passwords are hashed, API keys and credentials are encrypted at rest, all traffic is over HTTPS, and admin access is restricted. No system is perfectly secure; if we learn of a breach affecting your data we will tell you and the relevant authority as the law requires.
9. Children
The Service is for adults. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
10. Changes
We may update this policy. The effective date at the top shows the current version; material changes are notified by email or on the Service.
11. Contact
SMC Terminal · support@smcterminal.com · https://smcterminal.com