Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account data: Email address, name, and password (hashed) provided at registration
• Usage data: Activation history, service/country selections, API usage, webhook configurations
• Payment data: Transaction amounts and dates; we do not store full card numbers (handled by our payment processor)
• Technical data: IP addresses, device fingerprints, and browser information used to prevent fraud and abuse of free credit offers
• Communications: Emails and support tickets you send to us

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process payments and manage your balance
• To detect and prevent fraud, abuse, and violations of our Acceptable Use Policy
• To send transactional emails (receipts, security alerts, OTP forwarding if configured)
• To respond to support requests
• To comply with legal obligations

We do not use your personal information for advertising or sell it to third parties.

3. Data Sharing

We share your data only in the following circumstances:

• Payment processors: Stripe and/or NowPayments receive payment details necessary to process transactions
• Infrastructure providers: Vercel (hosting), Upstash (Redis caching), MongoDB Atlas (database) — all under data processing agreements
• Legal compliance: We may disclose data in response to lawful requests from law enforcement or government authorities, or to protect rights, property, or safety

We do not sell, rent, or trade your personal data.

4. Data Retention

Account data is retained for the duration of your account plus 90 days following deletion. Transaction records are retained for 7 years to comply with financial recordkeeping requirements. Anonymized usage analytics may be retained indefinitely.

5. Data Security

We implement industry-standard security including TLS encryption in transit, hashed passwords (bcrypt), and access controls on all data stores. Despite these measures, no method of data storage or transmission is 100% secure. We will notify affected users in the event of a data breach as required by law.

6. Cookies & Tracking

We use session cookies for authentication and functional cookies to remember your preferences. We use Vercel Analytics (privacy-preserving, no cross-site tracking) and do not use advertising cookies. You can disable cookies in your browser, though this may affect functionality.

7. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing
• Data portability (receive a copy of your data in machine-readable format)
• Opt out of any non-essential data use

To exercise these rights, email privacy@numberotp.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a minor, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use after the effective date constitutes acceptance.

10. Contact

For privacy-related questions or requests: privacy@numberotp.com