Privacy Policy

At RCVSMS Technology Co., Ltd. (“RCVSMS”, “we”, “our”), your privacy is our top priority. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

1. Information We Collect

We collect the following categories of information:

• Account information: email address, password (hashed), and optional profile details.
• Payment information: processed by our payment providers; we do not store full card numbers on our servers.
• Usage data: activation history, country and service requested, and timestamps of SMS receipt.
• Device and connection data: IP address, browser type, and device identifiers for security and fraud prevention.

2. SMS Message Content

We do not log, store, or share the content of SMS messages sent to rented numbers, except as strictly required to deliver the message to you in real time. Once delivered to your dashboard or via webhook, messages are automatically purged from our hot storage within 24 hours. Cold backups are retained for up to 30 days for troubleshooting, then permanently deleted.

3. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Service.
• Process payments and prevent fraud.
• Provide customer support and respond to inquiries.
• Send you transactional emails (receipts, security alerts).
• Comply with legal obligations.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Cookies and Tracking

We use first-party cookies and similar technologies to keep you logged in, remember your preferences, and measure aggregate traffic. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some features may not work.

5. Data Sharing

We share your data only with:

• Payment processors (Stripe, PayPal, crypto providers) to process transactions.
• Cloud infrastructure providers (e.g., AWS, Cloudflare) to host the Service.
• Law enforcement, when legally compelled and only after careful review.

6. Data Retention

We retain account data for as long as your account is active. After account closure, we delete or anonymize your data within 90 days, except where retention is required by law (e.g., tax records).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict processing.
• Request data portability.
• Withdraw consent at any time.

To exercise any of these rights, please contact us. We will respond within 30 days.

8. Security

We use industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest, and access controls based on the principle of least privilege. Despite our efforts, no system is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

We are headquartered in Singapore, with infrastructure distributed across multiple regions. By using the Service, you understand that your data may be transferred to, stored, and processed in countries other than your own. We rely on Standard Contractual Clauses and other approved mechanisms to ensure adequate protection.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the “Last updated” date. Material changes will be communicated via email or in-product notice.

12. Contact

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer.