1. Information We Collect
Account Information
When you register for an account, we collect your email address, name, and password (stored as a secure hash). We do not store plain-text passwords.
Transaction Data
We record all orders, balance transactions, and payment records associated with your account to provide our service and support dispute resolution.
Usage Data
We automatically collect IP addresses, request timestamps, and API usage patterns to enforce rate limits, detect abuse, and improve our infrastructure.
Payment Information
For USDT TRC20 payments, we record the wallet address assigned to your transaction and the on-chain transaction ID. We do not collect credit card or bank account details directly.
2. How We Use Your Information
Service Delivery
Your data is used to create and fulfil OTP and number rental orders, process payments, and provide customer support.
Security & Fraud Prevention
IP and usage data help us detect suspicious activity, prevent account takeover, and protect the integrity of our platform.
Communication
We may send transactional emails (order confirmations, payment receipts, password resets). We do not send unsolicited marketing emails without your explicit consent.
Legal Compliance
We may process and retain data as required by applicable laws and regulations.
3. Data Sharing & Third Parties
SMS Providers
To fulfil your orders, requests are forwarded to upstream SMS providers. These providers receive only the minimal information needed (country code, service code) and are bound by their own privacy policies.
No Sale of Data
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
Service Providers
We may share data with trusted service providers (hosting, monitoring, analytics) under strict data processing agreements.
Legal Requests
We may disclose information when required by law, court order, or governmental authority.
4. Data Retention
Account Data
Your account information is retained for as long as your account is active. You may request deletion of your account and associated data by contacting us.
Transaction Records
Order and payment records are retained for a minimum of 3 years for financial and legal compliance purposes.
Log Data
Server and API logs are retained for up to 90 days and then automatically purged.
5. Security
Data Protection
We use industry-standard encryption (TLS/HTTPS) for all data in transit and follow secure coding practices to protect data at rest.
Access Controls
Access to production systems and user data is restricted to authorised personnel only, using role-based access control.
No Guarantee
While we take security seriously, no system is perfectly secure. We encourage you to use a strong, unique password and enable any additional security measures available.
6. Your Rights
Access & Portability
You may request a copy of the personal data we hold about you at any time.
Correction
You may update your account information at any time via your profile settings.
Deletion
You may request deletion of your account. Note that certain data (transaction records) may be retained as required by law.
Contact
To exercise your rights or for any privacy-related questions, please contact us at the support address listed on our platform.
8. Changes to This Policy
Updates
We may update this Privacy Policy from time to time. When we do, we will revise the 'Last Updated' date at the top of this page. Continued use of our services after changes constitutes acceptance of the revised policy.