Privacy Policy
Last updated: [date]
This policy explains what personal data getotp collects, why, and your choices. The controller is [company legal name], [address]; contact [privacy email address].
What we collect
- Account data: name, email address, a salted password hash, language and currency preferences, and (if you turn it on) an encrypted two-step verification secret.
- Order data: the numbers you rent and the SMS messages they receive. Phone numbers and message text are encrypted at rest.
- Payment data: deposit amounts, references and status. Card and bank details are handled by our payment providers and are not stored by us.
- Security and device data: sign-in sessions with browser type and IP address, rate-limit counters and audit logs.
- Support data: tickets and messages you send us.
How we use it
To run the service (provide numbers, process payments and refunds), keep it secure (fraud prevention, abuse limits, session management), send account emails (verification, deposits, refunds, low balance, support replies — you can turn non-essential emails off in Settings), and meet legal obligations.
Who we share it with
SMS number providers (the service and country you buy), payment processors, our email delivery provider, hosting and database providers, and error-monitoring services if enabled. We do not sell personal data. We may disclose data when required by law.
Retention
Messages and orders are kept for [retention period] and then deleted or anonymised; financial records are kept for as long as accounting law requires. Expired sessions and password-reset tokens are removed regularly.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your data, and to object to or restrict processing. Contact us at [privacy email address]. You can also sign out other devices and turn on two-step verification in Settings.
International transfers
Our providers may process data outside your country. Where required we rely on appropriate safeguards. [Describe safeguards.]
Cookies
We use one essential, HTTP-only cookie to keep you signed in and a browser-storage setting to remember your light/dark choice. We do not use advertising cookies.