Privacy policy | ReserveSMS

Who’s responsible for your data

ReserveSMS is the controller of the personal data described here. About privacy, or to use any of your rights below, open a ticket on our Discord.

What we collect

Your email address, to sign you in with a code we email you.
Your orders and balance: which apps and countries you bought numbers for, prices, payments, refunds and the account’s ledger.
The numbers and messages on your orders: the phone number we gave you and the SMS it received. You can see them for 30 days; after that we delete the message text and keep only what we need for accounting and disputes.
Payment details from our payment providers: the payment’s reference, the card’s brand, its last four digits and the country that issued it, the provider’s fraud check on the payment, and its fee. We never receive or store full card numbers.
Sign-in records: each time you ask for a code or sign in, the IP address, the country it points to and your browser, with the time.
What you do while signed in: the pages of the site you open and the changes you make, such as adding balance or buying a number, with the time and IP address. We use them to spot fraud, such as stolen cards or one person running many accounts, and to help when something goes wrong. We don’t record the pages of visitors who aren’t signed in.
Support conversations: emails you send us and, if you use our Discord, your Discord user ID and the transcript of your support ticket.
Your review, if you write one: we publish your rating, your words, the name you choose and the app you bought a number for, and keep which account wrote it.

Why we use it, and on what basis

To provide what you buy: your account, your balance, numbers and refunds (performing our contract with you).
To prevent fraud and abuse and keep the service secure (our legitimate interests).
To answer support requests (our legitimate interests).
To keep financial records the law requires (legal obligation).
We don’t send marketing emails. If we ever do, we’ll ask for your consent first.

Who processes it for us

We share data only with providers who process it on our behalf, under data processing agreements:

Cloudflare, for hosting, security and the connection to our database (worldwide; based in the United States);
Neon, for our database (United States);
Stripe, for card, Apple Pay and Google Pay payments (United Kingdom, European Union and United States);
Resend, for the emails with sign-in codes (United States);
the provider of our phone numbers, which receives a random customer ID, never your email;
Discord, if you choose to get help there (United States).

Crypto payments go straight to our wallets on public blockchains, where every transaction is public. We’ll share data with authorities only when the law requires it.

Transfers outside your country

Some of these providers process data in the United States and other countries outside the UK and the European Union. Those transfers are covered by adequacy decisions, or by standard contractual clauses (with the UK addendum) in our agreements with the providers.

How long we keep it

Account data: until you delete your account.
Message text on orders: 30 days.
Reviews: until you ask us to remove yours, or delete your account.
Payment and order records: 6 years, for tax and accounting.
The pages you open and the changes you make: 90 days.
Sign-in records: 1 year.
Support tickets: in our Discord server until you ask us to delete them.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, and object to or restrict how we use it. To delete your account, or for anything else, open a ticket on our Discord. You can also complain to your data protection authority.

Cookies and storage

We use only what the site needs to work, and no advertising or tracking cookies. The Cookie policy lists each item.

Children

ReserveSMS is for people aged 18 and over.

Changes

We’ll post any changes on this page, with the date at the top.