1. Who is responsible for your data

MeuSMS, located at São Paulo, SP, Brazil, is the controller of the personal data described in this policy. You can reach us about privacy at [email protected].

2. Data we collect

We collect the following categories of data:

Account data: your email address and a hashed version of your password (we never store your password in plain text). If you sign up with Google Sign-In, we receive your email address from Google.
Sign-up and security data: the IP address used to create your account, account creation date, login session data and records of password reset requests.
Attribution data: how you found us, such as the referring page, landing page, campaign parameters (UTM source, medium and campaign), a referral or promo code you used, and an optional "how did you hear about us" answer.
Analytics identifiers: the Google Analytics client and session IDs linked to your account so we can measure sign-ups and purchases.
Order data: the numbers you bought, the app or service and country selected, prices, order status and timestamps, and your favorite services.
SMS content: the sender, text and verification code of messages received on the numbers you bought.
Payment and balance data: your balance, transaction history, and for crypto top-ups the token, amount, exchange rate, payment reference and the blockchain transaction signature. We do not collect card or bank details.
API data: a hashed version of your API keys, a short key prefix and when each key was created, last used or revoked.
Support data: the content of support tickets and messages, and any images you attach.
Technical data: browser, device and usage information collected through cookies and similar technologies (see section 5).

3. How we use your data and our legal bases

If you are in the European Economic Area, the United Kingdom or a similar jurisdiction, we rely on the following legal bases:

To create and run your account, process top-ups, deliver numbers and codes, keep order history and provide API access (performance of a contract).
To answer support tickets and handle refunds or disputes (performance of a contract and legitimate interests).
To prevent fraud, abuse, multiple accounts and violations of our Acceptable Use Policy, and to secure the service (legitimate interests).
To understand how visitors find and use the site and improve it (consent where required, otherwise legitimate interests).
To send service emails such as password resets and order or account notices (performance of a contract), and occasional product or promotional emails (legitimate interests or consent, with an unsubscribe option).
To keep accounting and transaction records and respond to lawful requests (legal obligation).

4. How we handle SMS content

Messages received on a number you bought are displayed only to you, in your dashboard and through the API. We store them as part of your order history so you can see past codes and so we can review a ticket if a code was wrong or rejected.

We keep SMS content as part of your order history while your account is open. You can ask us to delete your SMS history at any time by contacting [email protected], and it is deleted when your account is deleted. Our staff access message content only when needed to handle a support request, investigate abuse or meet a legal obligation. Verification codes are meant for one-time use; do not rely on TempSMSVerify to store anything you need to keep.

5. Cookies and analytics

We use essential cookies and local storage to keep you signed in and to protect forms against bots. With your consent where required, we also use analytics tools to understand traffic and improve the site:

Google Analytics 4, to measure visits, sign-ups and purchases.
Microsoft Clarity, to understand how pages are used through aggregated heatmaps and session replays.
Cloudflare Turnstile and/or Google reCAPTCHA, to tell humans from bots on sign-up, login and similar forms.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share data only with service providers that help us run TempSMSVerify, under contracts that limit their use of it:

Hosting and infrastructure providers that store our database and serve the website.
Upstream phone number providers, which supply the numbers and pass incoming SMS to us. We send them only what is needed to fulfill an order, such as the selected service and country, not your email address.
Our transactional email provider, to deliver account and service emails.
Google (Sign-In, Analytics, reCAPTCHA), Microsoft (Clarity) and Cloudflare (Turnstile), as described above.
Stripe, our card payment processor. Card details are entered on Stripe's checkout and go directly to Stripe; TempSMSVerify never sees or stores your full card number. We receive the payment status, amount, the last four digits and card brand, and Stripe's fraud-risk signals. Stripe processes this data under its own privacy policy.
Public blockchain networks such as Solana. Crypto top-ups are recorded on a public ledger that anyone can view; this is part of how the payment method works and we cannot delete it.
Authorities or other parties when required by law, to respond to valid legal requests, or to protect our rights, users or the public, for example in a fraud investigation.
A buyer or successor, if our business is involved in a merger, acquisition or asset sale.

7. International transfers

Our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

8. How long we keep data

We keep account data for as long as your account is open. SMS content is kept in your order history while your account is open, as explained above. Order, transaction and payment records are kept for as long as needed for accounting, tax, fraud prevention and dispute purposes, even after an account is closed. Support tickets are kept while needed to resolve the issue and for a reasonable period afterwards. When data is no longer needed, we delete or anonymize it.

9. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed passwords and API keys, and restricted staff access. No system is perfectly secure, so please use a strong, unique password and keep your API keys private.

10. Your rights

Depending on where you live, including under the GDPR, UK GDPR and the California Consumer Privacy Act as amended by the CPRA, you may have the right to:

Access the personal data we hold about you and receive a copy in a portable format.
Correct inaccurate data.
Delete your data, subject to records we must keep by law.
Object to or restrict certain processing, including processing based on legitimate interests.
Withdraw consent at any time, for example for analytics cookies or marketing emails.
Know what categories of data we collect and share, and opt out of any sale or sharing (we do neither).
Not be discriminated against for exercising your rights.
Lodge a complaint with your local data protection authority.

11. How to exercise your rights

Email [email protected] from the address linked to your account, or open a ticket in your dashboard. We may need to verify your identity before acting on a request. We aim to respond within one month, or within the time required by the law that applies to you. An authorized agent may make a request on your behalf if they provide proof of authorization.

12. Children

TempSMSVerify is intended only for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the service changes. The date at the top shows the latest version. If we make a significant change, we will notify you by email or in your dashboard before it takes effect.

14. Contact

For privacy questions or requests, email [email protected] or write to MeuSMS, São Paulo, SP, Brazil.

Privacy Policy