Skip to content
NumberHub
Open app

Privacy Policy

Effective date: 10 June 2026

This policy explains what data NumberHub (an independent service operated by a sole operator) collects, why, how long we keep it, and your rights. We collect as little as possible to run the Service.

1. Who we are

NumberHub is the data controller for the processing described here. For privacy requests, contact [email protected].

2. Data we collect

  • Telegram identifiers — your Telegram user ID (and username if set), used to operate your account and wallet. We do not require your real name, address, or ID documents for ordinary use.
  • Wallet & transaction data — top-up amounts, balance, holds, purchases, and order history.
  • Order data — the service/country or eSIM destination you select, the issued number or eSIM identifier, order status and timing.
  • Verification codes (SMS content) — the one-time code received for an order is shown to you and processed transiently to deliver it. See retention below.
  • Technical / log data — limited operational logs (e.g. timestamps, error and anti-fraud signals, and, at the network layer, IP address) needed for security and reliability.

We do not sell your data, and we do not run advertising profiles on you.

3. Why we process it (legal bases)

  • To provide the Service — performing our contract with you (orders, wallet, delivery).
  • Security & fraud prevention / legal compliance — our legitimate interests and legal obligations (anti-abuse, AML risk controls, responding to lawful requests).
  • Support — handling your enquiries.

4. Retention

  • Verification codes (SMS content) are not retained long-term: they are processed to deliver the code and removed from active records shortly after the order completes.
  • Account, wallet and order records are kept while your account is active and for a limited period afterwards as needed for accounting, dispute resolution, and legal/AML obligations.
  • Operational logs are kept only as long as needed for security and reliability, then deleted or aggregated.

5. Sub-processors

We rely on independent providers to deliver the Service. They process only what is necessary for their function:

  • Upstream number/SMS providers — to issue numbers and relay verification codes.
  • eSIM provider — to issue and manage eSIM profiles.
  • Payment processor — to process crypto top-ups; on-chain transactions are inherently public on the blockchain.
  • Telegram — the messaging platform through which the Service operates, under Telegram's own privacy policy.
  • Google — when you choose "Sign in with Google" we receive your Google email address and name from Google; and reCAPTCHA, used on our web sign-in and registration forms to block automated abuse, sends your IP address and interaction signals to Google. Both are governed by Google's own privacy policy. Neither is used for advertising, and you can avoid both by using the Telegram bot instead.
  • Hosting/infrastructure — the server provider that runs the Service.

6. Cookies & this website

This marketing website is static and does not set advertising or tracking cookies. We use Google Analytics 4 on this website, loaded only after you accept in the consent banner; it is governed by Google's own privacy policy, is never used for advertising, and declining means no analytics script is loaded at all. The Service itself runs inside Telegram, not via browser cookies.

7. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

8. Your rights

Subject to applicable law (including the GDPR where it applies), you may request access to, correction of, deletion of, or a copy of your data, and may object to or restrict certain processing. To exercise these rights, contact [email protected] or Telegram @TheNumberHubBot. You may also complain to your local data-protection authority.

9. Security

We apply reasonable technical and organisational measures to protect data, including encryption in transit, access restricted to those with a legitimate need, and periodic security reviews. No method of transmission or storage is perfectly secure.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly process their data.

11. Changes & contact

We may update this policy; the effective date above reflects the latest version. This policy is governed by the laws of the operator's country of residence. Questions: [email protected].