Privacy Policy

Last updated: October 5, 2026

This policy explains what personal data SMSora collects, why we need it, who helps us process it, and the control you have. We keep it short and honest.

1. Data we collect

Data	Why we need it
Email address, name (optional), password (stored only as a secure hash)	Creating your account, signing in, sending verification and reset codes
Account ID, wallet balance and Orbit transaction records	Running your wallet, holds, charges and refunds correctly
Purchase history: service, country, price, assigned number, time window and status	Showing your active numbers and history, support and fraud prevention
SMS/OTP codes received on your rented numbers	Delivering the code to you inside the app and keeping your purchase record complete
App preferences (language, toggles) and referral code links	Personalising the app and crediting referral rewards
Basic technical logs (requests, timestamps) from our hosting and security systems	Keeping the service fast, safe and protected against abuse

About OTP codes: codes received on your rented number are visible to your account and stored with that purchase record. Never use SMSora numbers for accounts whose security matters critically to you — anyone who knows the number could theoretically attempt to receive its codes. We do not sell or share OTP content with anyone except the infrastructure needed to deliver it to you.

2. Who processes your data

Google Firebase (Authentication, Firestore) — account and app data storage;
Cloudflare — website hosting and secure API gateway;
Brevo — sending your verification and password-reset emails;
Upstream number suppliers (such as SMSBower) — provisioning the virtual numbers you buy. They receive the service/country you request, not your identity.

We do not sell your personal data, and we do not run third-party advertising trackers on the site.

3. Cookies and local storage

SMSora uses only essential browser storage (localStorage) to keep you signed in and remember your preferences. We use no advertising or analytics cookies at this time.

4. How long we keep data

Account and wallet data: kept while your account exists.
Purchase and OTP history: kept with your account so your history stays accurate; it is removed when you delete your account.
Security logs: kept for a limited period, then deleted.

5. Your control

Access & correction: your email, name and preferences are editable in Settings.
Deletion: Settings → Delete account permanently removes your account and personal data from production systems (residual encrypted backups age out over time).
Questions or complaints: message us on WhatsApp at +81 90-8086-6139 — we respond personally.

6. Children

SMSora is not directed at children. You must be 18 or older to have an account, and we delete accounts we find to belong to minors.

7. Changes

If this policy changes materially, we will update the "last updated" date above and, for important changes, show a notice inside the app.