Privacy Policy

This Privacy Policy describes how EFIRITY PTE. LTD. — the company that operates BusySMS (“BusySMS”, “we”, “us”) — collects, uses, and shares information when you use busysms.net and the BusySMS mobile app (the “Service”). EFIRITY PTE. LTD. is the data controller for that information.

1. Data we collect

• Account data: phone number (E.164), display name, optional email, account status, creation and last login times.
• Authentication: one-time codes (hashed), session tokens (hashed), IP address and user-agent at login.
• Device & sharing: device id, platform, device name, optional device phone number, online/sharing status, and coarse geo (country) derived from your IP at login.
• Verification SMS (while sharing is on): for incoming OTP/verification-style messages on the SIMs you switch on, we collect the sender/service, the extracted verification code, a short message preview, and the use outcome (e.g. registration succeeded/failed). On a SIM where “Sync all texts” is off (below), we do not read or upload your other (non-verification) messages, and we never process any SMS while the gateway is off.
• All texts on a SIM you choose (Android, optional): if you choose “Sync all texts” when the Android app asks at setup, or turn it on for a SIM later, we also collect the sender, body and time of every other SMS and MMS text arriving on that SIM while the gateway is on, so you can read them on your BusySMS dashboard and other devices. You can choose “Only codes” instead, and turn it off for any SIM at any time. Synced texts are visible only to you, the account owner (staff access is limited as described in section 5); they are not shared with people you share the number with, are never returned as verification codes, and are never used for advertising or sold. They are deleted on the same schedule as verification codes (section 6).
• On iPhone: iOS lets no app read your messages. Texts reach BusySMS only through a Shortcuts automation you create, which hands each new text to the BusySMS app. The app checks it on the phone and sends only messages that look like a verification code; anything else that reaches our server is discarded without being stored.
• Shared numbers: if you share a number, the people you invite and who accept can read verification codes received on it from the moment they accept, until you or they end the share. We keep who you invited (their phone or email), when they accepted, and when they last read a code, so you can see who has access.
• Billing: your subscription status, active-device count and Stripe customer/subscription identifiers. Card details are handled by Stripe — we never see or store them.
• Support: messages you send to support@busysms.net.
• Browser and device characteristics (website only): when you load busysms.net we read technical characteristics of the browser and device itself — graphics and rendering capabilities, available fonts, supported media formats, storage limits, permission states and screen geometry. This is read once per browser per day, is used only to detect automated abuse and fraudulent sign-ups, and is shared with the security provider named in section 5. It does not include page content, anything you type, your location, or the contents of cookies or browser storage. It is not read from the Android app, and visitors in the EU/EEA, the UK and Switzerland are excluded.
• Diagnostics: limited app and server logs needed to operate and secure the Service.

2. Data we do not collect

• We do not read or upload your other (non-verification) SMS from a SIM where “Sync all texts” is off (chosen at setup, changeable per SIM).
• We do not process any SMS while sharing is turned off.
• We do not sell personal data to data brokers.
• We do not require access to your contacts, photos, or microphone.

3. Why we use data

• Create and secure your account (OTP login)
• Capture incoming verification/OTP SMS on your enabled SIMs so you can read them back through the API or MCP while the gateway is on
• On SIMs where “Sync all texts” is on, carry your other texts to your BusySMS dashboard and other devices
• Manage your devices, subscription, and billing
• Prevent fraud and abuse
• Provide support and improve reliability
• Comply with law and enforce our Terms

4. Legal bases (where applicable)

Depending on your region, we process data under: contract (providing the Service), consent (optional disclosures / marketing if ever offered), legitimate interests (security, fraud prevention, product improvement), and legal obligation.

5. Sharing

• Processors: hosting (e.g. cloud VMs), database (Supabase/Postgres), SMS (Twilio), payments (Stripe), analytics (Google Analytics / Google Tag Manager) for aggregate usage measurement, and a device-integrity provider that receives the browser and device characteristics described in section 1 in order to detect automated abuse of the website.
• BusySMS staff: our operators may access limited account and device data — and, only for support or abuse/fraud investigations, captured messages — as needed to run, secure, and support the Service. Captured codes are yours to read; we do not use them to sign in to third-party services on your behalf.
• Law enforcement: when required by valid legal process.

6. Retention

Verification codes and synced texts are deleted after up to 7 days. Captured messages — the sender, the text and the extracted code — are removed automatically once they pass that window. We say up to because the sweep runs as new messages arrive rather than on a clock, so a code may live a little past the seventh day on a quiet account; it is never kept indefinitely.

The clipboard. While the gateway is on, the app can notice that something you copied looks like a verification code — some phones keep OTP texts out of the SMS inbox entirely, and copying the code is the only way to catch them. Nothing from your clipboard is ever sent unless you tap the notification that asks. If you ignore it, the text stays on your phone.

Account data is kept while your account is active. After you delete your account we clear profile fields, devices, and sessions. The phone number remains on a deleted record so the same number cannot sign in again until support reactivates the account. Limited billing/security records may be retained where law requires.

7. Security

We use TLS in transit, hashed session tokens, access-controlled admin surfaces, and least-privilege service keys. No method of transmission or storage is 100% secure.

8. Your rights & account deletion

You may access or update profile fields where available, log out, and delete your account:

• In the Android app: Home → Delete account
• In the iPhone app: Account → Delete account
• On the web dashboard after sign-in
• Web instructions: busysms.net/account-deletion
• Email support@busysms.net from a contact we can match to your account

Depending on your region you may also have rights to access, rectify, export, restrict, or object to certain processing. Contact us to exercise those rights.

9. Children

The Service is not directed to children under 18. We do not knowingly collect data from children.

10. International transfers

Servers and processors may be located outside your country. Where required, we use appropriate safeguards for cross-border transfers.

11. Changes

We may update this Policy and will post the new date on this page.

12. SMS/Text Messaging

By providing your mobile phone number and checking the SMS consent box at signup, you agree to receive text messages from BusySMS (EFIRITY PTE. LTD.), including one-time passcodes and account notifications. Consent is optional and is not a condition of creating an account or using the service. Message frequency varies based on your account activity (typically 1–10 messages per month). Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are not shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never sold or shared with any third party.

13. Contact

BusySMS is operated by EFIRITY PTE. LTD. (UEN 202402844G), 68 Circular Road #02-01, Singapore 049422, which is responsible for the data described in this Policy. Privacy questions: support@busysms.net or call/text +1 (775) 504-5753