Legal
Privacy Policy
Last updated: January 1, 2026 · Effective: January 1, 2026
Summary: We collect only what we need to run the service. We never sell your data. Verification codes are not stored after delivery. You can delete your account at any time.
1. Information We Collect
- →Account information: When you register, we collect your email address and a hashed password. We never store plain-text passwords.
- →Transaction data: Purchase records, wallet balances, and verification history are stored to support your account and our legal obligations.
- →Usage data: We log API requests, response codes, and timestamps for security monitoring and abuse prevention. No message content is stored beyond code delivery.
- →Payment information: Crypto transaction hashes and deposit amounts are stored. We do not store private keys or payment credentials.
- →Anonymous purchases: Orders placed without an account are associated with a tracking ID only. No personal data is required.
2. How We Use Your Information
- →To provide and operate the service, including number allocation and SMS delivery.
- →To process payments, manage wallet balances, and issue cashback rewards.
- →To send transactional emails (verification, deposit confirmations) using the email address you provide.
- →To detect and prevent fraud, abuse, and unauthorized access.
- →To comply with legal obligations under applicable laws and regulations.
- →We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Data Retention
- →Verification codes: Stored only long enough to deliver them to your session. Not retained after delivery.
- →Account data: Retained for the lifetime of your account plus 30 days after deletion request.
- →Transaction logs: Retained for 7 years to meet financial record-keeping requirements.
- →Anonymous order data: Retained for 90 days, then permanently deleted.
4. Cookies and Tracking
- →We use strictly necessary session cookies to maintain authentication state.
- →We do not use advertising cookies, third-party trackers, or behavioral analytics.
- →No data is shared with advertising networks.
5. Third-Party Services
- →SMS providers (herosms, pvapins, proxnum, smscode.io): Receive phone number requests to fulfill verification orders. They process destination numbers under their own privacy policies.
- →Email delivery: We use SMTP services to send transactional emails. Email content is not used for any other purpose.
- →We do not use Google Analytics, Facebook Pixel, or similar tracking tools.
6. Your Rights
- →Access: You may request a copy of all personal data we hold about you.
- →Correction: You may request correction of inaccurate personal data.
- →Deletion: You may request deletion of your account and associated personal data.
- →Portability: You may request your data in a machine-readable format.
- →Objection: You may object to processing of your personal data for certain purposes.
- →To exercise any of these rights, contact us at support@nexus.vymerce.com.
7. Security
- →All data is transmitted over TLS/HTTPS. Passwords are hashed using bcrypt with a cost factor of 12 or higher.
- →Database access is restricted to authenticated service accounts with minimum necessary permissions.
- →We conduct regular security reviews and dependency audits.
8. Changes to This Policy
- →We may update this Privacy Policy from time to time. We will notify registered users by email of material changes at least 14 days before they take effect.
- →Continued use of the service after changes take effect constitutes acceptance of the updated policy.
Questions about this policy? Email support@nexus.vymerce.com or use our contact form.