Privacy Policy

VeriSnap ("we", "us") is built around data minimalism: we collect the least information needed to run an SMS verification marketplace. This policy explains what we collect, why, who we share it with, and the choices you have.

• Account data — your email address and, optionally, a display name. If you sign in with Google, we receive your email and name from Google.
• Transaction data — wallet deposits, purchases, refunds, and the payment reference. We never see or store your card number.
• Order data — the service, country, virtual number, and verification codes received for orders you place.
• Technical data — IP address and basic request metadata, used for security, rate limiting, and fraud prevention.

We do not ask for — and do not want — your real phone number, government ID, or any identity documents.

• To operate your account, wallet, and orders.
• To send transactional emails: welcome messages, sign-in alerts, and deposit receipts.
• To prevent fraud and abuse, including automated bot protection on sign-in and payment forms.
• To comply with legal obligations, such as payment-processing records.

We do not sell your personal data, and we do not use it for third-party advertising.

We share data only with the processors needed to run the Service:

• Authentication & database provider — account and data hosting.
• Payment processor — a PCI-DSS compliant, CBN-licensed gateway that handles deposits.
• Bot-protection service — automated abuse screening on sign-in and payment forms.
• Application host — website hosting and anonymous performance analytics.
• Telecom partners — receive only the service/country of your order to issue a number; they never receive your identity.

We may also disclose data where required by law or to protect our legal rights.

We use strictly necessary cookies to keep you signed in (authentication session cookies). We do not use advertising or cross-site tracking cookies.

Account and transaction records are kept while your account is active and for as long as we are legally required to retain payment records. Virtual numbers and received SMS codes are tied to orders and are not reused. You can request deletion of your account and associated personal data by emailing us; we will honour the request except where retention is required by law.

Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to production data is restricted, payments are handled entirely by our payment processor's PCI-DSS compliant infrastructure, and sign-in and payment endpoints are protected against automated attacks.

Depending on your jurisdiction (including under the Nigeria Data Protection Act), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, email support@verisnap.site from your account email address.

We may update this policy from time to time. Material changes will be signalled by updating the "Last updated" date above and, where practical, by notice in the app or by email.

Privacy questions or requests: support@verisnap.site.