Privacy Policy

This Privacy Policy explains what personal data Connect369 ("we", "us") collects when you use our website, dashboard, and API (the "Service"), why we collect it, and the choices you have. By using the Service, you agree to the collection and use of information as described here.

Account information: email address, optional first/last name and phone number, and your authentication credentials (handled by our authentication provider — we never see or store your raw password).

Transaction & wallet data: wallet balance and transaction history, orders you place (which country/app/number you rented and when), and payment metadata for wallet top-ups (for UPI payments: the UPI ID/VPA you pay from, transaction reference/UTR numbers, and the amount — we do not receive or store your UPI PIN, bank account number, or card details, since payment happens directly between you and your own bank/UPI app).

SMS/OTP content: the text of SMS messages received on numbers you rent, for as long as needed to display them to you and for a limited retention period afterward for support and fraud-investigation purposes. This can include one-time codes sent to that number — treat delivered codes as sensitive, since anyone with access to that virtual number for the rental period could also see them.

Usage & device data: IP address, browser/device information, and basic usage logs (e.g. pages visited, API calls made), collected for security, fraud prevention, and service reliability.

Support communications: anything you send us when you contact support, including attachments like payment screenshots you submit for manual payment verification.

• To provide the Service — provisioning numbers, delivering received SMS to your dashboard, and processing wallet top-ups;
• To detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service;
• To send transactional emails (purchase receipts, refund notices, low-balance alerts, security notices);
• To provide customer support;
• To maintain the security, integrity, and reliability of the Service; and
• To comply with legal obligations.

We share the minimum data necessary with the following categories of service providers, each acting under their own privacy and security obligations to us:

• Database & authentication infrastructure — stores your account, wallet, order, and message data, and enforces access controls so only your account (and authorized Connect369 staff) can read your data.
• Upstream number provider — receives the country/app you request a number for, in order to provision the number and forward its SMS traffic back to us.
• Email delivery provider — sends transactional emails on our behalf (receipts, alerts); receives your email address and the content of that specific email.
• Hosting/infrastructure provider — runs the Connect369 application and its backend functions.
• Push notification provider — where enabled, delivers notifications to your browser/device about order updates.

We do not sell your personal data. We may disclose data if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Connect369, our users, or the public.

We retain account and transaction data for as long as your account is active and for a reasonable period afterward to comply with financial record-keeping obligations, resolve disputes, and prevent fraud. SMS/OTP message content is retained for a shorter period, after which it may be deleted or anonymized. You can request deletion of your account as described below, subject to data we are legally required to retain (for example, financial transaction records).

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your account and associated data, subject to legal retention requirements;
• Object to or restrict certain processing; and
• Request a copy of your data in a portable format.

To exercise any of these rights, email support@connect369.app from your account's registered email address. We may need to verify your identity before acting on a request.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), row-level access controls so users can only read their own data, hashed/salted handling of sensitive secrets (such as API keys and payment webhook secrets), and restricted internal access to production data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We use essential cookies/local storage to keep you signed in and to remember basic preferences. If we enable analytics tools in the future, we will use them to understand aggregate usage patterns (e.g. which pages are visited) rather than to build individual advertising profiles, and this policy will be updated to reflect that before it goes live.

Our infrastructure providers may process and store data in regions outside your own country. Where this happens, we rely on our providers' own safeguards and contractual protections for cross-border data transfer.

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective" date above and, where practical, notify you. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

Questions about this Privacy Policy or your data can be sent to support@connect369.app.