Privacy Policy
Effective Date: January 1, 2026 · Last Updated: September 3, 2026
Our Privacy Commitment
At MebbOTP ("we", "our", or "us"), your privacy and security are paramount. This Privacy Policy outlines how we collect, use, store, and safeguard your personal information when you access our platform, website, developer APIs, or use our Google OAuth 2.0 authentication integration.
1 Information We Collect
We collect only the minimum necessary information required to provide reliable non-VoIP SMS verification services and secure account management:
- Account Details: Name, email address, chosen username, and encrypted password hash (if registering via email).
- Google OAuth 2.0 Data: When you choose to sign in using Google, we collect your verified Google email address, full name, Google unique user ID (`sub`), and profile picture URL.
- Transaction & Rental Logs: Records of order IDs, rented carrier numbers, OTP message snippets, timestamp, and wallet transactions.
- Technical & Connection Logs: IP address, browser user-agent, and country identifier for security fraud prevention and carrier routing optimization.
2 Google API Services User Data Policy Compliance
MebbOTP's use and transfer to any other app of information received from Google APIs strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements:
- Limited Scope Access: We request only basic authentication scopes (`openid`, `profile`, `email`) exclusively to identify your account and grant secure access.
- No Data Sharing / Sale: We never sell, lease, or monetize your Google user data to data brokers, advertisers, or third-party marketing entities.
- No Advertising Use: Google user data is never used or transferred for serving advertisements, personalized marketing, or retargeting campaigns.
- No AI Model Training: Your Google user data is not used to train generalized artificial intelligence or machine learning models.
3 How We Use Your Information
Your data is processed strictly for the following operational purposes:
- To authenticate your identity and administer your secure customer account.
- To allocate physical non-VoIP carrier telephone lines and deliver real-time SMS verification payloads.
- To process wallet credits, crypto deposits, and automated refunds for unused lines.
- To dispatch critical service communications (such as 24-hour dedicated line expiration alerts and security notifications).
- To defend against automated bot attacks, credential abuse, and fraudulent chargebacks.
4 Data Storage, Security & Retention
We enforce strict industry-standard technical safeguards to protect your personal data:
- Encryption in Transit & at Rest: All data transmissions are encrypted using Transport Layer Security (TLS 1.3 / HTTPS). Passwords are cryptographically hashed using standard Bcrypt algorithms.
- Data Retention: Temporary SMS verification codes are purged automatically after order fulfillment. Account profiles are retained as long as your account remains active.
5 Your Data Rights & Deletion (GDPR / CCPA)
Under international privacy frameworks (including EU GDPR and California CCPA/CPRA), you have the right to:
- Access and export your personal account data.
- Request immediate correction of inaccurate profile data.
- Right to Erasure (Account Deletion): You may request permanent deletion of your account and all associated personal data at any time by contacting our support team at info@mebbglobal.com. Deletion requests are fulfilled within 48 hours.
6 Contact Information
If you have questions, inquiries, or requests regarding this Privacy Policy or our Google data handling practices, please contact our Data Protection Officer: