Privacy Policy

This Privacy Policy describes how EFIRITY PTE. LTD. — the company that operates BusySMS (“BusySMS”, “we”, “us”) — collects, uses, and shares information when you use busysms.net and the BusySMS mobile app (the “Service”). EFIRITY PTE. LTD. is the data controller for that information.

1. Data we collect

• Account data: phone number (E.164), display name, optional email, account status, creation and last login times.
• Authentication: one-time codes (hashed), session tokens (hashed), IP address and user-agent at login.
• Device & sharing: device id, platform, device name, optional device phone number, online/sharing status, and coarse geo (country) derived from your IP at login.
• Verification SMS (while sharing is on): for incoming OTP/verification-style messages only, we collect the sender/service, the extracted verification code, a short message preview, and the use outcome (e.g. registration succeeded/failed). We do not read or upload your personal (non-verification) messages, and we never process any SMS while the gateway is off.
• Billing: your subscription status, active-device count and Stripe customer/subscription identifiers. Card details are handled by Stripe — we never see or store them.
• Support: messages you send to support@busysms.net.
• Browser and device characteristics (website only): when you load busysms.net we read technical characteristics of the browser and device itself — graphics and rendering capabilities, available fonts, supported media formats, storage limits, permission states and screen geometry. This is read once per browser per day, is used only to detect automated abuse and fraudulent sign-ups, and is shared with the security provider named in section 5. It does not include page content, anything you type, your location, or the contents of cookies or browser storage. It is not read from the Android app, and visitors in the EU/EEA, the UK and Switzerland are excluded.
• Diagnostics: limited app and server logs needed to operate and secure the Service.

2. Data we do not collect

• We do not read or upload your personal (non-verification) SMS.
• We do not process any SMS while sharing is turned off.
• We do not sell personal data to data brokers.
• We do not require access to your contacts, photos, or microphone.

3. Why we use data

• Create and secure your account (OTP login)
• Capture incoming verification/OTP SMS on your enabled SIMs so you can read them back through the API or MCP while the gateway is on
• Manage your devices, subscription, and billing
• Prevent fraud and abuse
• Provide support and improve reliability
• Comply with law and enforce our Terms

4. Legal bases (where applicable)

Depending on your region, we process data under: contract (providing the Service), consent (optional disclosures / marketing if ever offered), legitimate interests (security, fraud prevention, product improvement), and legal obligation.

5. Sharing

• Processors: hosting (e.g. cloud VMs), database (Supabase/Postgres), SMS (Twilio), payments (Stripe), analytics (Google Analytics / Google Tag Manager) for aggregate usage measurement, and a device-integrity provider that receives the browser and device characteristics described in section 1 in order to detect automated abuse of the website.
• BusySMS staff: our operators may access limited account and device data — and, only for support or abuse/fraud investigations, captured messages — as needed to run, secure, and support the Service. Captured codes are yours to read; we do not use them to sign in to third-party services on your behalf.
• Law enforcement: when required by valid legal process.

6. Retention

Verification codes are deleted after up to 7 days. Captured messages — the sender, the text and the extracted code — are removed automatically once they pass that window. We say up to because the sweep runs as new messages arrive rather than on a clock, so a code may live a little past the seventh day on a quiet account; it is never kept indefinitely.

The clipboard. While the gateway is on, the app can notice that something you copied looks like a verification code — some phones keep OTP texts out of the SMS inbox entirely, and copying the code is the only way to catch them. Nothing from your clipboard is ever sent unless you tap the notification that asks. If you ignore it, the text stays on your phone.

Account data is kept while your account is active. After you delete your account we clear profile fields, devices, and sessions. The phone number remains on a deleted record so the same number cannot sign in again until support reactivates the account. Limited billing/security records may be retained where law requires.

7. Security

We use TLS in transit, hashed session tokens, access-controlled admin surfaces, and least-privilege service keys. No method of transmission or storage is 100% secure.

8. Your rights & account deletion

You may access or update profile fields where available, log out, and delete your account:

• In the Android app: Home → Delete account
• On the web dashboard after sign-in
• Web instructions: busysms.net/account-deletion
• Email support@busysms.net from a contact we can match to your account

Depending on your region you may also have rights to access, rectify, export, restrict, or object to certain processing. Contact us to exercise those rights.

9. Children

The Service is not directed to children under 18. We do not knowingly collect data from children.

10. International transfers

Servers and processors may be located outside your country. Where required, we use appropriate safeguards for cross-border transfers.

11. Changes

We may update this Policy and will post the new date on this page.

12. SMS/Text Messaging

By providing your mobile phone number and checking the SMS consent box at signup, you agree to receive text messages from BusySMS (EFIRITY PTE. LTD.), including one-time passcodes and account notifications. Consent is optional and is not a condition of creating an account or using the service. Message frequency varies based on your account activity (typically 1–10 messages per month). Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes; mobile opt-in data and consent are never sold or shared with any third party.

13. Contact

BusySMS is operated by EFIRITY PTE. LTD. (UEN 202402844G), 68 Circular Road #02-01, Singapore 049422, which is responsible for the data described in this Policy. Privacy questions: support@busysms.net or call/text +1 (775) 500-0032