Privacy Policy
Last updated: September 21, 2026
1. Introduction
Numlix.io is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.
Core principle: Numlix.io is designed to minimize the collection of personal data. We never store SMS codes after they are displayed, and we never request any identity documents.
2. Data we collect
2.1 Data you provide to us
- Email address — used for account creation and notifications
- Password — stored in hashed and encrypted form
- Country of residence — used to adapt currency display
2.2 Data collected automatically
- IP address — used for fraud detection and security
- Navigation data — pages visited, actions performed on the platform
- Device information — browser type, operating system
- Transaction timestamps — date and time of number purchases
2.3 Transaction data
- Wallet top-up history (amount, date, payment method used)
- Purchased number history (country, service, price, status)
- Current wallet balance
WHAT WE NEVER STORE: SMS codes received are displayed once and deleted immediately after reading. Your real phone number is never collected or stored.
3. How we use your data
We use your personal data exclusively to:
- Provide and improve our virtual number services
- Manage your account and electronic wallet
- Send transactional notifications (purchase confirmation, top-up, refund)
- Detect and prevent fraud and malicious activities
- Comply with our legal and regulatory obligations
- Respond to your customer support requests
We do NOT use your data for:
- Sale or sharing with third parties for commercial purposes
- Unsolicited marketing or spam
4. Data sharing
Numlix.io never sells your personal data to third parties. Your data is shared only in the following cases:
4.1 Technical service providers
- Cloud hosting providers for secure data storage
- Payment processors (FedaPay) for transaction processing — only necessary data
- SMS number providers for virtual number assignment
- Meta (Facebook) to measure our ads — only page visits, sign-ups, top-ups and the numbers you buy, with your email address in hashed form
- Google Ads to measure our ads — only sign-ups and top-ups, with the top-up amount and its payment reference
4.2 Legal obligations
We can disclose your data to competent authorities if the law requires it, including in cases of judicial investigation or legal requisition.
All our service providers are subject to strict confidentiality obligations. They can only use your data for the purposes for which it was shared.
5. Data security
Numlix.io implements technical and organizational security measures to protect your data:
- SSL/TLS encryption for all communications
- Password hashing with Bcrypt
- AES-256 encryption for sensitive data in the database
- Restricted data access on a least-privilege basis
- Continuous monitoring of access and intrusion attempts
- Regular data backups in secure environments
Despite these measures, no security system is infallible. In the event of a data breach likely to affect your rights, we will notify you within the timeframes required by law.
6. Data retention
We retain your personal data for the following periods:
- Account data: for the duration of your account + 12 months after closure
- Transaction history: 36 months (legal and accounting obligation)
- SMS codes received: deleted immediately after display
- Security logs: 12 months
- Navigation data: 6 months
7. Your rights
Under applicable data protection laws, you have the following rights:
Right of access
You can request to view all personal data we hold about you.
Right of rectification
You can request the correction of inaccurate or incomplete data.
Right to erasure
You can request deletion of your personal data, subject to our legal retention obligations.
Right to data portability
You can request to receive your data in a structured, readable format.
Right to object
You can object to the processing of your data for specific purposes.
To exercise your rights, contact us at: privacy@numlix.io. We will respond to your request within 30 days.
9. International transfers
Your data can be processed in countries different from yours, particularly for server hosting. In such cases, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable laws.
10. Changes
We can modify this Privacy Policy at any time. In case of significant changes, we will notify you by email or via a notification on the platform. The last update date is always indicated at the top of this document.
11. Contact
For any questions regarding this Privacy Policy or your personal data:
- Email: privacy@numlix.io
- General support: support@numlix.io
- Website: numlix.io