Privacy Policy

GR8 SMM · Last updated: 11 August 2026

If translations of this policy are published, the English version governs.

GR8 SMM is a service that publishes video to social platforms from Telegram and brings replies from those platforms back into Telegram. This policy explains what we collect, why, how long we keep it, who else sees it, and how you erase it.

We are reachable at privacy@gr8smm.com and answer within two business days.

1. Who is responsible

The service operates under the trade name GR8 SMM, which acts as the data controller for the processing described in this policy. If the operating structure changes, this section will be updated before the change takes effect.

2. What we collect

Account connections. When you connect Instagram, YouTube, TikTok, VK, or a Telegram channel, the platform gives us an access token and the identifiers of the account you chose. We store the token encrypted and the identifiers in plain form: account ID, username, account type, and the expiry date of the token.

Content you send us. Video files, images, cover frames, captions, and the scheduling instructions attached to them.

Publication records. For every post we make on your behalf: which account, which platform, when, the resulting post ID and link, and — where the platform reports it — reach, likes, comments, saves, and shares.

Messages. If you enable the inbox, we receive direct messages sent to your connected accounts and the replies your team sends back. For each message we store its text, attachments, timestamps, and the sender's platform ID and display name.

Telegram identifiers. Your Telegram user ID, username, and the IDs of the chats and topics where the service works. This is how the bot knows who is speaking and where to answer.

Operational logs. Technical records of requests and failures, used to find and fix problems.

We do not collect payment card details, government identifiers, location data, or any special categories of personal data.

3. Why we use it

To publish your content to the accounts you connected, at the times you chose.
To show you what happened: status, links, history, and platform statistics.
To deliver incoming messages to your Telegram workspace and send your replies back.
To draft captions and reply suggestions, when you switch that on (see §5).
To keep the service working: diagnosing errors, preventing abuse, and enforcing platform rate limits.

We do not use your data to train machine-learning models. We do not sell it, and we do not share it for advertising.

4. Legal basis

Where the GDPR applies, we process your data to perform our contract with you (Article 6(1)(b)) and, for security and diagnostics, on the basis of our legitimate interest in operating a reliable service (Article 6(1)(f)).

5. Who else sees your data

The platforms you connect. Content you publish goes to Instagram (Meta), YouTube (Google), TikTok, VK, or Telegram, according to what you selected. Their own terms and privacy policies then apply to what you posted.

Telegram. The service runs as a Telegram bot, so everything you send to it and everything it shows you passes through Telegram's infrastructure.

Anthropic. When caption drafting or reply suggestions are enabled, we send the relevant text — a caption brief, or the message thread we are drafting a reply to — to Anthropic's API to generate the draft. Anthropic processes it on our behalf and does not use it to train models. This feature is off unless enabled, and no text leaves the service while it is off.

Infrastructure providers. Hosting and file storage vendors that operate our servers under contract and process data only on our instructions.

This is the complete list of recipients. We do not share your data with anyone else, and we never sell it.

6. YouTube API Services

GR8 SMM uses YouTube API Services to upload video to the YouTube channel you connect. By using this part of the service you agree to be bound by the YouTube Terms of Service.

Google's handling of data is described in the Google Privacy Policy.

You can revoke this application's access to your Google account at any time via the Google security settings page. Doing so stops all future uploads immediately.

Limited Use. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only for the features described in this policy, and never for advertising, resale, or model training.

7. How long we keep it

We keep your data for as long as the corresponding account stays connected to the service. When you disconnect an account, we delete its access token immediately and its content, publication records, and messages within 30 days.

Operational logs are kept for 90 days.

If you ask us to delete something sooner, we do — see §9.

8. Your rights

You may request access to your data, correction of it, a copy in a portable format, restriction of processing, or erasure. Write to privacy@gr8smm.com; we answer within two business days and complete the request within 30 days.

If you are in the EU or the UK and believe we have handled your data improperly, you may complain to your national data protection authority.

9. Deleting your data

Full instructions are at gr8smm.com/data-deletion. In short:

Disconnect the account in the bot: /connect → the account → "Disconnect". The access token is destroyed at that moment.
To erase everything we hold, write to privacy@gr8smm.com from the address or Telegram account associated with your workspace, stating which accounts to erase.
We confirm the erasure in writing within 30 days.

Deleting your data with us does not delete posts already published on the platforms. Those live on the platform and are removed there.

10. Security

Access tokens are encrypted at rest. Traffic between you, the service, and the platforms is encrypted in transit. Access to production data is limited to the people who operate the service.

No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority within 72 hours of becoming aware of it.

11. Children

The service is for businesses and creators and is not directed at children under 16. We do not knowingly collect data from them. If you believe a child's data reached us, write to privacy@gr8smm.com and we will erase it.

12. Changes to this policy

If we change how we handle your data, we update this page and change the date at the top. Material changes are announced in the bot before they take effect.

13. Contact

GR8 SMM General: hello@gr8smm.com Privacy and data deletion: privacy@gr8smm.com Response time: two business days