Privacy policy

What we collect

• Account data: email address, display name (optional), hashed password (argon2id — we cannot read your password).
• Financial data: wallet ledger entries, deposit references you submit, and payment verification records.
• Order data: country/service, the rented phone number, received verification codes, and provider order identifiers.
• Operational data: IP addresses and user agents for authentication and abuse prevention, rate-limit counters, and audit logs of privileged actions.

Why we process it

To provide the service (purchase, delivery, refunds), to prevent fraud and abuse, to comply with financial record-keeping obligations, and to support you when you contact us. We do not sell personal data and do not run advertising trackers.

Sensitive handling

• Received verification codes are visible only to you — the account owner. Support staff and administrators never see OTP codes.
• Phone numbers are masked in all list views and admin surfaces.
• API credentials and payment secrets are redacted from logs.

Upstream providers and payment processors

To fulfill orders we share the minimum necessary data with our upstream number providers (order parameters). To verify deposits we handle payment references with the relevant mobile financial service. These processors act under their own terms; we choose partners that meet our security requirements.

Retention

Order and audit records are retained for the period required for financial reconciliation and fraud prevention, then purged or anonymized by automated retention jobs. You may request deletion of your account and associated data, subject to legal retention obligations for financial records.

Your rights

You can access your data (profile, ledger, orders, tickets) at any time in the dashboard and export it as CSV. To request correction or deletion, open a support ticket from your account.