Privacy policy

The service and this policy

SMS.Red provides numbers for receiving SMS, one-time verifications and rentals, with tools for developers and resellers. This policy describes data processing when you use the website, account, API and related features. Contact details for questions are on the support page.

If you use a reseller store, its administrator also receives data needed to manage your account and orders. Ask that store’s support for additional information about its operations.

Support

Data we process

The data depends on the features you use.

Account data: email, account and store identifiers, a password hash and, when third-party sign-in is available, identifiers and profile data provided by that service.
Order data: selected service and country, assigned number, terms, prices, statuses, notes, transfers and renewals.
Incoming SMS: sender, message text, extracted code and receipt time.
Payment data: amount, currency, fees, status, transaction references and provider confirmations; for crypto settlement, associated addresses and transaction references.
Support requests and information you provide to resolve a problem.
Technical data: IP address, browser or device information, sign-in events, service requests, errors, session data and consent settings.

How data is used

Data is used to create and protect accounts, provide numbers and SMS, fulfil orders, maintain balances, process payments and refunds, provide support, prevent abuse and diagnose failures.

Where applicable law requires a legal basis, service delivery relies on performance of a contract; mandatory records on legal requirements; security and abuse prevention on legitimate interests with regard to your rights. Optional advertising measurement and SMS forwarding to Telegram are enabled by your choice.

SMS, API and number access

SMS text and codes are stored so they can appear in your account and support the features you choose. Data passes through number suppliers and service infrastructure; this is not an end-to-end encrypted SMS service.

An API key provides access to permitted account functions. Giving it to an application, AI client or MCP tool allows that client to perform available actions and read data. Protect it like a password and revoke it if you lose control of it. A supplier may reassign a number after the term ends; do not rely on access after order expiry.

Telegram forwarding

New SMS forwarding is enabled after you connect a private Telegram chat and opt in. The bot receives SMS text, codes, the number and related information needed for delivery. Telegram processes that data under its own policies.

Pause or disconnect forwarding in account settings or use /stop in the bot. Disabling forwarding prevents future sends; it does not automatically remove messages already delivered to your Telegram history.

Suppliers and payment services

Data is shared with providers of numbers and SMS, hosting and network protection, email delivery, support and payments as needed for the selected feature. Payment methods may include Heleket, RollyPay, PayGate and its selected payment provider; available methods are shown at checkout.

Card details and identity checks are handled by the selected payment provider. SMS.Red payment forms do not require a full card number or CVV. Account email may be provided to the processor to arrange payment. Providers have their own privacy policies.

Data may also be disclosed to meet a lawful requirement, protect rights or investigate abuse. Store administrators receive information for servicing their own store’s customers.

Sessions and advertising measurement

The site uses cookies and local storage for sign-in, language, consent preferences and recovery of a started checkout. Disabling necessary storage may prevent those features from working.

With your permission, OpenAI receives page views, registrations, checkout starts and number purchases; Google receives page views and successful purchase events and uses advertising cookies. OpenAI may hash supported customer details for matching. Google enhanced matching and personalized ads are off. SMS text and purchased numbers are excluded.

Decline optional advertising measurement or change your choice through “Ad privacy settings”. Declining does not disable the core service.

Retention and security

Data is kept as needed for accounts and services, support, financial records, disputes and applicable obligations. Retention depends on the data type, order state, recordkeeping obligations and investigation needs; there is no single period for all data.

Controls include access restrictions, protected network connections and password hashing. Backups and logs may retain information through their retention cycles. No storage or transmission method eliminates every risk.

Processing in different countries

Infrastructure and suppliers may process data in different countries. Transfer requirements depend on the participants and your jurisdiction. Ask support for information about providers, processing locations and applicable measures.

Requests and rights

Depending on applicable law, you may request access, correction, erasure, restriction and portability, or object to particular processing. In particular, you may object to processing based on legitimate interests where that right applies.

Withdrawing consent affects future processing and does not undo the lawfulness of prior processing. Deleting an account does not always mean immediate deletion of financial records, dispute information or required logs. Support can explain applicable limits.

Use the support page for requests; ownership verification may be needed. You may also complain to the competent data-protection authority in your jurisdiction.