Privacy Policy

• Account information: your name and email address, and your account status and role.
• Wallet & transaction data: your balance, top-ups, purchases, refunds, and related records. We do not store your card or bank details — payments are processed by our payment provider.
• Service content: SMS codes and emails received to the temporary numbers and inboxes you create, and documents you generate. Message content is stored for a limited time so you can view it, and sensitive fields may be masked or redacted.
• Usage & technical data: log data such as IP address, device/browser information, timestamps, and API usage, used for security, fraud prevention, and improving the service.

• To provide the service — assign numbers/inboxes, deliver received messages, process wallet transactions, and generate documents.
• To secure the service — detect and prevent fraud, abuse, and unauthorized access.
• To support you — respond to requests and troubleshoot issues.
• To comply with legal obligations and enforce our Terms.

Wallet top-ups are processed by Paystack. Your card and banking details are entered on and handled by Paystack, not OTPWave, and are subject to Paystack's privacy policy. We receive only a confirmation of payment and limited transaction metadata.

We share limited data with trusted providers only as needed to run the service:

• Payment processing — Paystack.
• Virtual numbers and inbound SMS — upstream number providers.
• Email sending and receiving — Resend (and its email infrastructure).
• Hosting, database, and authentication — our cloud hosting and database providers.

These providers process data on our behalf under their own terms and security practices. We do not sell your personal information.

Messages received to your numbers and inboxes, and documents you generate, are associated with your account and retained for a limited period so you can access them. You can delete inboxes and numbers, which ends their ability to receive new messages. We may retain minimal records as required for security, fraud prevention, or legal compliance.

We keep personal data only as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Transaction records may be retained longer where required by law.

We use industry-standard measures to protect your data, including encryption in transit, access controls, hashing of one-time codes, and row-level database security. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.

You may access and update your account information, and you may request deletion of your account and associated personal data, subject to records we must retain by law. To exercise these rights, contact us at the address below.

We use essential cookies and similar technologies to keep you signed in and to operate the service securely. We do not use them to sell your data.

OTPWave is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.

We may update this policy from time to time. Material changes are reflected by updating the “Last updated” date. Continued use after changes take effect constitutes acceptance.

For privacy questions or requests, email support@otpwave.com.