Privacy Policy

VirtualSMS ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform — including the website, dashboard, API, MCP server, and Telegram bot.

Account Information

When you register, we collect your email address (or Telegram / Google account identifier if you use social login), and a display name if provided. We do not require government ID, proof of address, or your personal phone number to open an account.

Transaction and Order Data

We record account balance, deposit history (including cryptocurrency transaction references and fiat-rail order identifiers such as SBP payments), and order metadata — which service, country, product type (verification, rental, proxy, session, etc.), and delivery status. We do not store payment card or bank account credentials.

API, MCP, and Bot Usage

If you use our REST API, MCP server, or Telegram bot, we process API key identifiers, request metadata, and delivery logs necessary to operate and secure those channels.

Technical Data

We collect IP addresses, browser type, device identifiers, and usage logs for security, fraud prevention, and service improvement.

• To provide and maintain verification, rental, and related products
• To process deposits and track account balances
• To detect and prevent fraud, abuse, and terms violations
• To send transactional emails (activation results, balance alerts)
• To improve and optimize our platform
• To comply with applicable laws and regulations

SMS messages received on our numbers are stored only long enough to deliver the verification code to you and resolve disputes. Message bodies are automatically deleted from our systems within 24 hours of delivery. We do not sell or share SMS content with third parties for marketing.

Deposits may be made via cryptocurrency or other rails offered in the deposit flow (such as SBP). Cryptocurrency payments are processed by a third-party processor; on-chain transactions are public by nature. Fiat or bank-rail payments (including SBP) are handled entirely by the payment provider — we receive confirmation and credited amount, not your full banking credentials.

We store transaction references, order identifiers, and deposit amounts needed for accounting, fraud prevention, and support. We do not sell payment data or use it for advertising.

We do not sell your personal data. We may share data only:

• With service providers who assist in operating our platform (under strict confidentiality agreements)
• When required by law, court order, or governmental authority
• To protect our rights, users, or the public from harm
• In connection with a merger or acquisition (with appropriate notice)

We use essential session cookies for authentication. We use privacy-focused product analytics (such as PostHog) to understand feature usage and improve the Service — not for third-party advertising. We do not use advertising cookies or sell behavioral profiles.

Account data is retained for as long as your account is active. Transaction logs are retained for up to 3 years for fraud prevention and compliance. SMS content is deleted within 24 hours. You may request deletion of your account and associated data by contacting support.

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict processing of your data, and to data portability. To exercise these rights, contact us at support@virtualsms.io .

We implement industry-standard security measures including HTTPS encryption, hashed password storage, CSRF protection, and regular security reviews.

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our platform.

For privacy-related inquiries, contact us at support@virtualsms.io or via our Telegram support bot at https://t.me/VirtualSMSioBot