SastaOTP is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our virtual number and SMS verification services.
1 Information We Collect
We collect information that you provide directly to us and information that is automatically collected when you use our services:
- Account Information: Name, email address, password (encrypted), and account preferences.
- Transaction Data: Deposit history, order history, balance information, and payment method details (we do not store full card numbers).
- Usage Data: Pages visited, features used, time and date of access, and service selection history.
- Device Information: IP address, browser type, operating system, and device identifiers.
- Communication Data: Messages you send to our support team.
2 How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our SMS verification services
- Process transactions and send related information, including purchase confirmations
- Send technical notices, security alerts, and support messages
- Respond to your comments and questions and provide customer service
- Monitor and analyze usage patterns to improve user experience
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Comply with legal obligations
3 Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party vendors who help us operate our platform (payment processors, cloud hosting providers), bound by confidentiality agreements.
- Legal Requirements: If required by law, court order, or government authority.
- Safety: To protect the rights, property, or safety of SastaOTP, our users, or the public.
- Business Transfers: In connection with any merger, acquisition, or sale of company assets.
4 Data Security
We implement industry-standard security measures to protect your personal information:
- All data is transmitted over SSL/TLS encrypted connections (HTTPS)
- Passwords are hashed using bcrypt — we never store plain-text passwords
- Regular security audits and vulnerability assessments
- Access to personal data is restricted to authorized personnel only
- Payment processing is handled by Cashfree, a PCI-DSS compliant provider
⚠️ No method of transmission over the Internet is 100% secure. We strive to use commercially acceptable means to protect your data but cannot guarantee absolute security.
5 Cookies
We use cookies and similar tracking technologies to improve your experience:
- Session Cookies: Required for login and maintaining your session.
- Preference Cookies: Remember your settings (dark/light mode, currency preference).
- Analytics Cookies: Help us understand how users interact with our platform.
You can control cookies through your browser settings. Disabling cookies may limit some functionality of our service.
6 Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate personal information.
- Deletion: Request deletion of your account and associated data.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing of your personal data in certain circumstances.
To exercise any of these rights, contact us at Sastaotpsupport@gmail.com.
7 Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. We will delete or anonymize your data within 30 days of account deletion, except where we are required to retain it for legal, tax, or regulatory purposes.
Transaction records may be retained for up to 7 years for accounting and legal compliance.
8 Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will delete such information promptly. If you believe we have inadvertently collected information from a minor, please contact us immediately.
9 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page with an updated date
- Sending an email notification to registered users for material changes
- Displaying a notice on our website
Your continued use of our services after changes become effective constitutes your acceptance of the revised policy.