Privacy Policy

Cập nhật lần cuối 4 October 2026

Draft for legal review. Company details and policy values (5 Sims, 180…) fill in from Settings → Brand & company and Legal & policies. Replace every remaining [PLACEHOLDER] and have a lawyer approve this page before launch.

This policy explains what personal data 5 Sims ("we") collects when you use 5 Sims, why, and for how long.

What we collect

Account: name, email address, password (stored only as a hash), two-factor settings, sign-in method (e.g. Google).
Usage: orders (service, country, number, price, status, times), SMS messages received on numbers you bought, top-ups and payments, API keys (stored as a hash) and API request metadata.
Security and fraud prevention: IP addresses, a device identifier cookie, browser details, sign-in history, and risk signals on payments.
Support: messages you send us.
Identity checks: only if a verification is required for higher limits — the documents you upload for that check.

We do not buy personal data and we do not sell it.

Why we use it

To provide the Service: create numbers, show codes, keep your balance and history (contract).
To prevent fraud, abuse and chargebacks, and to enforce the Acceptable Use Policy (legitimate interest).
To meet legal obligations such as accounting and valid legal requests (legal obligation).
To send service emails (receipts, security and account notices). Marketing email is sent only if you opt in, and you can unsubscribe at any time (consent).

Who we share it with

Number suppliers receive only what they need to deliver a number (e.g. service and country) — not your name or email.
Payment processors receive what they need to process a payment.
Service providers that host our infrastructure and send email, under data-processing agreements.
Authorities, only as described in our Law-enforcement request policy.

How long we keep it

SMS text and phone numbers on your orders are anonymised 180 days after the order.
Orders, payments and wallet records are kept as financial records for as long as the law requires ([Not set: Financial records kept for]).
API request logs are kept 7 days; webhook delivery logs 30 days.
Identity documents are deleted 30 days after the check.
When you delete your account, your personal details are anonymised; financial records are kept as above.

Your rights

You can access, correct, export or delete your data, and object to or restrict some processing. Most of this is in Settings; for anything else write to [email protected]. You may also complain to your data-protection authority.

Cookies

See the Cookie Policy.

Security

Passwords and API keys are stored as hashes, supplier credentials and 2FA secrets are encrypted, and staff access requires two-factor authentication and is logged.

Contact

5 Sims, [Not set: Registered address]. Data protection contact: [email protected].