Privacy Policy

Last updated October 13, 2026

What we collect

• Account data: email address, password hash, IP addresses and timestamps of signup and logins, notification and webhook settings.
• Usage data: the numbers you reserve, when, for which service (if you tell us), and your credit transactions.
• Message content: SMS received on numbers during your sessions, including sender and timestamp, so we can show them to you, email them to you if enabled, and forward them to your webhook if configured.
• Payments: handled by Stripe. We never see your full card number; we keep the Stripe session reference and amount.

How we use it

• To provide the service, attribute incoming messages to the right customer, bill you, and send transactional emails (codes, expiry notices, receipts).
• To prevent fraud and abuse and comply with legal obligations and carrier requirements.
• We do not sell personal data and do not use message content for advertising.

Retention

• Messages attributed to you are kept while your account is active so you can search your inbox; you may delete your account at any time, which erases message content and anonymises your account record.
• Messages not attributed to any customer (spam, late arrivals) are kept for operations and abuse prevention and purged periodically.
• Logs are kept for up to 30 days.

Sharing

Service providers only: Cloudflare (hosting and database), our mobile carrier gateway (message delivery), Stripe (payments), and our email delivery provider. Each processes data only to provide its service. We disclose data to authorities when legally required.

Your rights

You can access and export your messages (CSV) and transactions from the dashboard, change your email preferences, and delete your account from Settings. For other requests, contact support.

Security

Passwords are hashed with PBKDF2; sessions use HttpOnly cookies; API keys are stored hashed; webhooks are signed. All traffic is encrypted in transit.