Privacy Policy

Last updated: November 2, 2026

Our Zero-Knowledge Commitment

Anonymous SMS operates on a strict zero-knowledge architecture. We do not log IP addresses, and we do not compile tracking profiles on our users.

1. Scope of Policy

This Privacy Policy details how Anonymous SMS ("we", "us", or "our") collects, processes, and protects your personal data when you visit our website, use our SaaS platform, or interact with our APIs. It also outlines your privacy rights under applicable data protection laws, including GDPR, CCPA/CPRA, and global privacy standards.

2. Data We DO NOT Collect or Store

  • Message Contents: Message text is processed ephemerally in RAM strictly for dispatch to carrier networks and is permanently purged immediately upon transmission. We do not maintain message body logs on non-volatile storage.
  • Recipient Phone Numbers: Recipient phone numbers are irreversibly hashed instantly upon job processing and are erased post-delivery.
  • User IP Addresses: We do not capture or log IP addresses in server access logs, application telemetry, or database records.
  • Behavioral Tracking & Ads: We do not use third-party advertising tracking scripts, cross-site tracking cookies, or user profiling cookies.

3. Data We Process & Purpose of Processing

To deliver a functional SaaS service, we process the minimal data required for operation:

A. Account Credentials

When creating an account, we store your email address (if provided) and a cryptographically salted and hashed version of your password (via bcrypt/Argon2id).

B. Billing & Payment Information

Payments are processed directly by PCI-DSS Level 1 certified third-party payment processors (Stripe, Apple Pay, Google Pay). We never store full credit card numbers or CVV codes on our servers. We receive only transaction tokens and currency details to credit your account balance.

C. Technical System Metrics

We process anonymized, aggregate telemetry (such as system-wide queue depth, carrier delivery response codes, and total daily throughput) solely for capacity management and server health monitoring.

4. Third-Party Sub-processors & Carrier Networks

To route SMS messages globally, data is transmitted through intermediary telecommunication networks, tier-1 carriers, and SMS aggregators.

These third parties process data strictly as required to fulfill message routing to destination mobile handsets. Our contracts require all processors to adhere to stringent security standards and confidentiality obligations.

5. Data Retention & Erasure Schedule

  • Payment Transaction Tokens: 7 Years (Tax/Financial Compliance)
  • Account Deletion Request: Purged within 30 days

6. User Rights (GDPR & CCPA/CPRA)

You hold the right to access, export, or request permanent deletion of your minimal account data at any time. Submit your request via our support portal.