Privacy Policy

1. Who we are

NumberHub is the data controller for the processing described here. For privacy requests, contact info@numberhub.io.

2. Data we collect

• Telegram identifiers — your Telegram user ID (and username if set), used to operate your account and wallet. We do not require your real name, address, or ID documents for ordinary use.
• Wallet & transaction data — top-up amounts, balance, holds, purchases, and order history.
• Order data — the service/country or eSIM destination you select, the issued number or eSIM identifier, order status and timing.
• Verification codes (SMS content) — the one-time code received for an order is shown to you and processed transiently to deliver it. See retention below.
• Technical / log data — limited operational logs (e.g. timestamps, error and anti-fraud signals, and, at the network layer, IP address) needed for security and reliability.
• Proxy processing includes credentials, connection destinations and network addresses, plus per-order traffic totals and timestamps. The residential networks your traffic passes through also process the connections. Do not assume this is a no-logs service.

We do not sell your data, and we do not run advertising profiles on you.

3. Why we process it (legal bases)

• To provide the Service — performing our contract with you (orders, wallet, delivery).
• Security & fraud prevention / legal compliance — our legitimate interests and legal obligations (anti-abuse, AML risk controls, responding to lawful requests).
• Support — handling your enquiries.

4. Retention

• Verification codes and received messages (SMS text, email content) are processed to deliver them and deleted once the order has closed and is at least 7 days old. Rentals and proxy packages keep their messages or login details while active; eSIM installation details (QR and activation codes) are kept for up to 400 days so the plan can be reinstalled.
• Account, wallet and order records are kept while your account is active and for a limited period afterwards as needed for accounting, dispute resolution, and legal/AML obligations.
• Operational logs are kept only as long as needed for security and reliability, then deleted or aggregated.

5. Sub-processors

Some processing needed to deliver the Service happens outside NumberHub, limited to what each function requires:

• Mobile networks — numbers, the verification messages they receive and eSIM data plans run on mobile networks, which process what is needed to deliver them.
• Payment processor — to process crypto top-ups; on-chain transactions are inherently public on the blockchain.
• Telegram — the messaging platform through which the Service operates, under Telegram's own privacy policy.
• Google — when you choose "Sign in with Google" we receive your Google email address and name from Google; and reCAPTCHA, used on our web sign-in and registration forms to block automated abuse, sends your IP address and interaction signals to Google. Both are governed by Google's own privacy policy. Neither is used for advertising, and you can avoid both by using the Telegram bot instead.
• Hosting/infrastructure — the data centre that runs the Service.
• Proxy processing includes credentials, connection destinations and network addresses, plus per-order traffic totals and timestamps. The residential networks your traffic passes through also process the connections. Do not assume this is a no-logs service.

6. Cookies & this website

The web app uses necessary sign-in cookies and local storage for preferences and consent. Google Analytics loads only after consent and may set first-party cookies. Change your choice using Cookie settings in the footer. reCAPTCHA processes security signals and may set a necessary cookie. Telegram has its own privacy and storage policies.

7. International transfers

Data may be processed in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

8. Your rights

Subject to applicable law (including the GDPR where it applies), you may request access to, correction of, deletion of, or a copy of your data, and may object to or restrict certain processing. To exercise these rights, contact info@numberhub.io or Telegram @TheNumberHubBot. You may also complain to your local data-protection authority.

9. Security

We apply reasonable technical and organisational measures to protect data, including encryption in transit, access restricted to those with a legitimate need, and periodic security reviews. No method of transmission or storage is perfectly secure.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly process their data.

11. Changes & contact

We may update this policy; the effective date above reflects the latest version. This policy is governed by the laws of the operator's country of residence. Questions: info@numberhub.io.