Privacy Policy

What we collect

Account data: your name, email address, password (stored only as a modern password hash), and optional company and timezone.

Service data: the numbers you rent, your contacts, your conversations and call records, usage meters, and billing transactions.

Payment data: cryptocurrency deposit addresses, quoted amounts, transaction hashes, and confirmation status. We never see and never store your private keys or seed phrases.

Technical data: session cookies needed to keep you logged in, and security logs such as sign-in timestamps.

How we use it

To provide the service: routing your messages and calls, provisioning your numbers, and metering usage against your prepaid balance.

To secure the service: verifying sessions, rate-limiting abuse, and keeping an audit trail of sensitive actions.

To communicate: transactional email about verification, payments, renewals, and security. Marketing email is opt-in only.

What we never do

We never sell your personal data. We never read your conversations except to investigate a support request you raise or a legal requirement. We never expose telecom provider credentials or your payment details to the browser.

Sharing

Data is shared only with processors necessary to run the service: our telecom carrier for message/call delivery, our hosting and database providers, and our crypto payment processor. Each is bound to process data only on our instructions.

Retention

Conversations and call records are kept while your account is active. Deleted contacts and conversations are removed from backups within 30 days. Legal-hold requests may extend retention where required by law.

Your rights

You can export or delete your data, correct your profile, and delete your account from Settings, or by contacting privacy@smtext.app. We respond to verified requests within 30 days.

Security

Sessions use signed HttpOnly cookies. Provider API credentials and payment gateway secrets are stored only in server-side environment variables. Sensitive endpoints are rate-limited and audited.

Contact

Questions about this policy: privacy@smtext.app.