Shadow OTP ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our virtual number services.
By using Shadow OTP, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use our services.
We have implemented industry-standard security measures to protect your personal information. All SMS messages are encrypted with AES-256 encryption and automatically deleted after 24 hours.
We collect the following types of information when you use our Services:
All payment information is processed through secure payment gateways. We do not store your full card details. Your payment information is encrypted using industry-standard SSL/TLS encryption.
We automatically collect certain information when you use our Services:
We use your information for the following purposes:
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Service Provision | Contractual Necessity | Account information, payment details, usage data |
| OTP Delivery | Contractual Necessity | Purchased numbers, SMS messages |
| Payment Processing | Contractual Necessity | Payment information, transaction details |
| Security & Fraud Prevention | Legitimate Interest | IP address, usage patterns, account activity |
| Customer Support | Legitimate Interest | Support communications, chat logs, tickets |
| Service Improvement | Legitimate Interest | Usage analytics, feature usage, error reports |
| Communications | Legitimate Interest | Email notifications, updates, promotional offers (with opt-out option) |
| Compliance | Legal Obligation | Transaction records, audit logs, regulatory compliance |
We DO NOT sell, rent, or lease your personal information to third parties. We share your information only in the following limited circumstances:
We may share your information with third-party service providers who perform services on our behalf:
We may share your information if we are involved in a merger, acquisition, or sale of assets. In such cases, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.
We may disclose your information if required to do so by law or in response to valid legal requests from government authorities:
We will never share your SMS messages or OTP codes with third parties. Your verification codes are transmitted directly to you and automatically deleted after 24 hours.
We implement industry-standard security measures to protect your personal information:
We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
| Data Type | Retention Period | Notes |
|---|---|---|
| SMS Messages | 24 hours | >Auto-deleted after delivery|
| Transaction Records | 5 years | >For tax and accounting purposes|
| Account Information | Until account deletion | >Or 2 years of inactivity|
| Support Communications | 2 years | >Or until resolved|
| Analytics Data | 1 year | >Anonymized and aggregated
You can request deletion of your personal information by:
We will delete your personal information within 30 days of your request, unless we need to retain certain information for legal or legitimate business purposes.
We use cookies and similar tracking technologies for:
You can control and manage cookies through your browser settings:
Note: Disabling cookies may affect your ability to use certain features of our Services.
Under applicable data protection laws, you have the following rights regarding your personal information:
You have the right to request a copy of the personal information we hold about you.
You have the right to request correction of inaccurate or incomplete personal information.
You have the right to request deletion of your personal information, subject to certain exceptions (legal, legitimate business interests).
You have the right to request restriction of our processing of your personal information.
You have the right to receive your personal information in a structured, machine-readable format.
You have the right to object to certain processing of your personal information based on our legitimate interests.
To exercise any of these rights, you may:
We will respond to your request within 30 days of receipt. If we deny your request, we will explain the reasons for our decision.
Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected such information, we will delete it immediately.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@shadowotp.com.
Your information may be transferred to, and processed in, countries other than Pakistan. We will take appropriate measures to ensure your information is treated securely and in accordance with this Privacy Policy.
When we transfer your information internationally, we ensure appropriate safeguards, including:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons.
We will notify you of material changes by:
Your continued use of our Services after any changes constitutes acceptance of the updated Privacy Policy.
If you have any questions about this Privacy Policy or how we handle your data, please contact our Privacy Team:
For general inquiries, please contact our Customer Support team at support@shadowotp.com or +92 331 5775327.
Our Privacy Team is here to help you understand your rights and how we protect your data.