Last Updated: July 13, 2026
This Privacy Policy explains how Smbios ("Company," "We," or "Us") collects, uses, discloses, and protects information relating to end users ("User" or "You") in connection with Our website and Services. By using Our Services, You consent to the practices described here.
Capitalized terms not defined below have the meanings given in Our Terms of Service.
1. Definitions
1.1 "Personal Data" means any information relating to an identified or identifiable natural person.
1.2 "Processing" means any operation performed on Personal Data, including collection, storage, use, sharing, or deletion.
1.3 "Services" has the meaning given in the Terms of Service.
2. Information We Collect
2.1 Account Information
When You register or purchase, We collect:
- Email address
- Username
- Password (stored as an irreversible hash, never in plaintext)
2.2 Technical & Telemetry Data
To secure Your account and validate license usage, We collect:
- Hardware identifiers (HWID)
- Operating system version and configuration
- IP address and approximate geolocation
- Session metadata (login times, session tokens)
- Crash logs and diagnostic reports
- Usage statistics related to license validation
2.3 Payment Information
Payment card and billing details are Processed exclusively by independent third-party payment providers. Smbios does not receive or store full card numbers, CVV codes, or bank credentials. We may receive from processors a transaction identifier, the last four digits of the payment method, and general geographic information for fraud prevention.
2.4 Communications
If You contact Us via Discord, email, or support tickets, We collect the content of those communications and any identifiers You share.
3. How We Use Your Information
We Process Personal Data solely for:
- Account authentication and license validation
- Fraud prevention and abuse detection
- Maintaining service stability and diagnosing technical issues
- Responding to inquiries and providing support
- Complying with legal obligations
- Improving the Services
Under the Singapore Personal Data Protection Act (PDPA), Our lawful bases for Processing are:
- Your consent, obtained when You agree to Our Terms and this Policy
- The performance of Our contract with You
- Our legitimate interests in fraud prevention and service security
- Compliance with legal obligations
Smbios does not sell Personal Data to any third party.
4. Sharing of Information
4.1 Payment Providers
Payment transactions are handled by third-party payment processors. Personal Data is shared with these providers solely to complete transactions and prevent fraud.
4.2 Service Providers
We use trusted third-party services to operate the Site and Services. Personal Data may be transmitted to these providers only as needed to deliver the corresponding service.
4.3 Legal Requirements
We may disclose Personal Data:
- In response to a lawful court order or subpoena issued under Singapore jurisdiction
- To protect Our legal rights, property, or safety
- To investigate fraud, abuse, or security incidents
5. Third-Party Services
The following third parties may Process Personal Data on Our behalf:
- Payment processors — for transaction handling and fraud prevention
- Cloudflare — for content delivery, DDoS protection, and infrastructure security
- Discord — for community communication, role management, and customer support
Each provider maintains its own privacy policy. Smbios is not responsible for how these providers Process data outside of Our instructions.
6. Data Retention
We retain Personal Data only for as long as necessary:
- Account information — retained while Your account is active
- Technical and telemetry data (HWID, IP, session) — retained only for the minimum operational window required for authentication and security, then deleted
- Payment logs — retained up to 180 days for accounting and fraud-prevention purposes
- Support communications — retained up to 12 months
- Data required for legal compliance — retained for the period required by applicable law
7. Security
Smbios uses encryption (in transit and at rest), access controls, and regular security reviews to protect Personal Data. Passwords are stored as irreversible hashes and are never transmitted in plaintext. Smbios does not store payment card numbers, CVV codes, or bank credentials.
No security system is fully impenetrable. We cannot guarantee absolute security but work continuously to reduce risk.
8. International Data Transfers
Smbios is based in Singapore. If You access the Services from outside Singapore, Your Personal Data may be transferred to and Processed in jurisdictions with different data-protection laws. By using the Services, You consent to such transfers.
Where Personal Data is transferred outside Singapore, We take reasonable steps to ensure a comparable level of protection.
9. Cookies and Session Management
The Site uses only strictly-necessary cookies for session management and authentication. We do not use:
- Behavioral tracking cookies
- Advertising or retargeting cookies
- Third-party analytics services
You may configure Your browser to reject cookies, but this may prevent You from logging in or using certain features.
10. Age Requirement
The Services are not intended for individuals under 13 years of age. Smbios does not knowingly collect Personal Data from anyone under 13. If You believe We have collected data from a child under 13, please contact Us so We can delete it.
11. Your Rights
Subject to applicable law, You have the following rights over Your Personal Data:
11.1 Access — request a copy of the Personal Data We hold about You.
11.2 Correction — request correction of inaccurate or outdated Personal Data.
11.3 Deletion — request that We delete Your Personal Data, subject to legal retention obligations.
11.4 Portability — request Your Personal Data in a machine-readable format.
11.5 Withdrawal of Consent — withdraw consent to Processing at any time, without affecting the lawfulness of prior Processing.
Some data may be retained after a deletion request when required for fraud prevention, legal compliance, or dispute resolution.
12. How to Exercise Your Rights
To exercise any of the rights above, open a support ticket in Our Discord server. Please include:
- The email address associated with Your account
- A clear description of Your request
We aim to respond within 30 days.
13. Data Breach Notification
In the event of a Personal Data breach that is likely to result in significant harm to affected users, Smbios will:
- Notify the Singapore Personal Data Protection Commission (PDPC) as required by law
- Notify affected users through the Site, email, or Our Discord announcements
14. Governing Law
This Privacy Policy is governed by the laws of the Republic of Singapore, including the Personal Data Protection Act (PDPA).
15. Changes to This Policy
Smbios may update this Privacy Policy at any time. Material changes will be communicated through the Site or Our Discord. Continued use of the Services after updates constitutes acceptance of the revised Policy.
16. Contact
Questions about this Privacy Policy or Your Personal Data can be directed to Our Discord server. Open a ticket in the support channel and We will respond as soon as possible.