Privacy Policy
Last updated: 30 October 2026
This policy explains what personal data OTP Bolt processes and why. We collect as little as possible to run the Service securely.
Data we collect
- Account data: email address, optional name/company/country, hashed password.
- Usage data: activations, numbers, messages received on numbers you rent or own, call records, wallet ledger, invoices.
- Payment data: payment status and references. Card details are handled by Stripe and never reach our servers. For crypto we store the network, amount and transaction hash.
- Security data: IP address at signup and on payments, audit logs of sensitive actions.
Why we use it
- To provide the Service (contract).
- To prevent fraud and abuse, including automated payment-risk checks (legitimate interest).
- To send transactional email such as verification codes, receipts and renewal reminders (contract).
- To meet legal and accounting obligations (legal obligation).
SMS content
Messages received on a temporary number are shown to the account that rented it during and after the rental. Messages on dedicated numbers are stored on that number's thread for the account that owns it. We do not read message content except where needed to investigate abuse or at your request.
Sharing
We share data only with processors needed to run the Service: telecom and number partners, Stripe (payments), our email delivery provider, and our hosting provider. We do not sell personal data.
Retention
Account and billing records are kept while your account is open and for as long as accounting law requires afterwards. Activation messages are retained for up to 12 months.
Your rights
You can access, correct, export or delete your data, or object to processing, by emailing [email protected]. If you are in the EU/UK you may also complain to your data-protection authority.
Cookies
We use only essential cookies: a session cookie for signed-in users and a preference for light/dark theme stored in your browser.