Privacy Policy

What we collect

• Account data: your email address and a hashed password. We never store the password itself.
• Numbers and messages: the phone numbers you rent and every SMS they receive, including the sender and message body, so we can show them in your dashboard and email them to you.
• Billing data: payments are handled by Stripe. We store a Stripe customer ID and subscription IDs; we never see or store your card number.
• Technical data: server logs with IP addresses and timestamps, used for security and to keep the service running.

How we use it

• To provide the service: assign numbers, deliver messages, and bill you.
• To send transactional email: verification codes you receive, payment problems, password resets. You can turn off per-message emails on your account page.
• To forward messages to a webhook URL, only if you configure one for a number.
• To prevent abuse, such as rate-limiting sign-in attempts.

We do not sell your data and we do not use it for advertising.

Who else sees it

• Carriers (currently Twilio) route SMS to your number and see message contents in transit.
• Stripe processes payments under its own privacy policy.
• Resend delivers our email.
• Railway hosts the application and database.
• Any webhook endpoint you configure receives the messages you forward to it.

We share data with authorities only when legally required.

How long we keep it

• Messages stay in your inbox until you delete them or the number is released. You can delete single messages or clear a whole inbox at any time.
• Released numbers and their message history are kept for 90 days for dispute resolution, then deleted.
• Account data is kept while your account exists. Email us to close it and we will delete it within 30 days, except billing records we must keep for tax purposes.
• Password reset links expire after one hour and are deleted once used.

Cookies

We set two cookies: pr_session keeps you logged in and contains nothing but a signed session token, and pr_locale remembers your language. We do not use analytics or advertising cookies.

Your rights

You can access, correct, export or delete your data by emailing us. If you are in the EU/EEA or UK you also have the right to object to processing and to complain to your data protection authority.

Changes

If we make material changes to this policy we will email you before they take effect.