Privacy and data

What data do you actually keep?

Answer

We store the country, the line type, the term, and the fact that a payment arrived. The system has no fields for identity documents, names, addresses or card details. Message bodies are deleted 24 hours after delivery by default; access logs live in memory and rotate hourly instead of being written to disk.

The longer version

The distinction that matters is between data a company chooses not to look at and data a company never wrote down. Only the second survives a change of ownership, an acquisition, a court order or a breach. Retention is the one thing you can extend deliberately — a 90-day message retention add-on exists for people who need a record — and it is opt-in rather than the default, because a default that keeps everything is how providers end up with a liability they never wanted. What we do keep exists for reasons we can state plainly: the country and term describe the line we owe you, and the payment confirmation stops the same invoice being spent twice.