Privacy Policy
We built VerifyBox to help you verify accounts without sacrificing privacy. This document explains what information we collect, how we use it, and the rights you have over your data.
Overview
Information We Collect
We only collect the information needed to deliver our SMS verification services and maintain a secure platform. This includes:
- Account details such as email address, hashed passwords, and optional profile information.
- Billing and payment files required to complete transactions (processed via PCI-compliant partners).
- Usage data, including selected phone numbers, message delivery diagnostics, and audit logs.
- System telemetry (IP address, device metadata) to prevent fraud, abuse, and ensure platform reliability.
How We Use Information
VerifyBox uses personal data strictly to operate and improve the service:
- Provisioning virtual numbers, routing messages, and providing delivery statuses in real time.
- Authenticating account access, enforcing security limits, and preventing malicious activity.
- Processing payments, handling refunds, and providing invoicing or tax documentation.
- Communicating product updates, service notices, and responding to support requests.
- Conducting analytics to monitor uptime, optimize routing, and improve performance.
Data Sharing & Disclosure
We do not sell personal data. We share information only with:
- Telecom carriers and SMS aggregators that enable number provisioning and message delivery.
- Payment processors and fraud-prevention providers operating under strict contractual safeguards.
- Vetted infrastructure vendors (hosting, monitoring, analytics) bound by confidentiality agreements.
- Law-enforcement authorities when required to comply with applicable laws and lawful requests.
Data Retention
We retain records only as long as necessary to deliver the service, meet legal obligations, and resolve disputes. Message content is never stored longer than operationally required to relay it to you. You may request deletion of your account data at any time, subject to regulatory obligations.
Your Rights & Choices
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. You can exercise these rights by contacting [email protected]. We will respond within 30 days and verify your identity before fulfilling requests.
Security & Compliance
We apply multiple layers of security to protect your data:
- Data encryption in transit (TLS 1.2+) and at rest using industry best practices.
- Role-based access controls, hardware security keys, and continuous activity monitoring.
- Independent vulnerability scans, patch automation, and incident response runbooks.
- Compliance reviews aligned with GDPR, CCPA, and local telecommunications requirements.
Cookies & Tracking
We use strictly necessary cookies for authentication and session continuity, plus optional analytics cookies to understand feature usage. You can adjust cookie preferences in the dashboard or your browser settings. Declining optional cookies will not reduce core functionality.
International Transfers
VerifyBox infrastructure is primarily hosted in the United States. When data is transferred internationally, we rely on adequate safeguards such as Standard Contractual Clauses or equivalent protective measures, and we always ensure the transfer meets regulatory requirements.
Contact
If you have questions, complaints, or would like to exercise your privacy rights, please reach out using one of the methods below.
Updates to this Policy
We may update this Privacy Policy to reflect changes in technology, regulation, or our business practices. When we make material changes, we will notify you via email or dashboard alerts and update the "Last updated" date above. Continued use of the service after notice constitutes acceptance of the updated policy.