Privacy Policy

• Account details: your name and email address, and your profile photo if you sign in with Google.
• Sign-in sessions: the IP address and browser/device type of each signed-in device, so you can see and sign out sessions in Settings.
• Purchases: the service and server you chose, the temporary number assigned, the SMS and verification code received on it, prices and timestamps.
• Wallet and payments: your top-ups, purchases and refunds, and payment references from our payment partner. Card, UPI and bank details are handled by the payment partner, never by us.

• to create your account, sign you in and keep it secure;
• to provide numbers, show your codes, and run your wallet, refunds and transaction history;
• to send sign-in codes and essential service emails (we don't send marketing email);
• to prevent fraud and abuse, and to meet legal, tax and accounting obligations.

We don't sell your data or use it for advertising. We share only what each provider needs:

• Supabase — database hosting;
• Vercel — website hosting;
• Resend — sending sign-in code emails;
• Google — only if you choose Google sign-in;
• Razorpay — processing wallet top-ups;
• SMS number partners — receive the service you want a number for, never your name or email.

Some of these providers may store data outside India. We may also disclose data when the law requires it.

• A sign-in cookie that keeps you logged in.
• A cookie that remembers whether the dashboard sidebar is open.
• Your light/dark theme choice, stored in your browser.

We keep account data while your account is open. Sign-in sessions expire on their own. Wallet, payment and purchase records are kept for as long as Indian tax and accounting laws require, even after an account is closed.

You can ask us to:

• tell you what personal data we hold about you;
• correct it — you can also change your name yourself in Settings;
• delete your account and personal data, except records we must keep by law;
• withdraw consent, which may mean we can no longer provide the service.

Email support@yesotp.store and we will reply within 30 days.

Data is encrypted in transit, sign-in uses one-time email codes or Google, and access to production data is restricted. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Yes OTP is for people aged 18 and over. We don't knowingly collect data from children.

We will post changes here and update the date above. For questions or complaints, contact our grievance officer, Ravinder, at support@yesotp.store. If you're not satisfied with our response, you may complain to the Data Protection Board of India.