Skip to content
HushSMS

Privacy policy

Effective July 1, 2026

In plain terms

We hold a country, a term, a payment confirmation, and message bodies for 24 hours. We do not hold your identity, because there is nowhere in the system to put it.

This policy describes every category of data we process. It is short because the list is short, and the list is short by design rather than by policy.

What we collect

DataDo we hold it?RetentionWhy
Name, address, ID documentNoThere is no field for it in the system
Payment card or bank detailsNoWe accept cryptocurrency only
Email addressOnly if you provide oneDeleted with the orderTo send your panel link
Country, line type, termYesLife of the orderTo provision and bill the line
Payment confirmationYes7 yearsAccounting obligation in our jurisdiction
Inbound message bodiesYes24 hours by defaultTo deliver them to you
Call metadata (time, duration)Yes30 daysCarrier reconciliation and fraud control
IP addressesIn memory onlyRotated hourly, never written to diskRate limiting

What we do not do

  • No analytics. There is no third-party script on this site, no tag manager and no CDN beacon.
  • No advertising or marketing profiles. We do not have a mailing list.
  • No sale or sharing of any data with anyone, for any price.
  • No cookies except a single functional preference cookie if you change language.

We comply with valid legal process issued in our jurisdiction. What we can produce is a country, a term, a payment confirmation and any message body less than 24 hours old. We cannot produce identity records because none exist. We will notify the affected customer where the law permits us to do so.

Your rights

If you are in the EU, UK or another jurisdiction with equivalent rights, you may request access to, correction of, or erasure of your data. In practice the answer to an access request is a country, a term and a payment. Write to [email protected]; we respond within 30 days.

Processors

We use a cryptocurrency payment processor to generate and settle invoices, and upstream carriers to terminate SMS and voice. Neither receives identity data from us because we have none to send. Carriers necessarily see message metadata as part of delivering it — that is how telephony works, and no provider can change it.

Changes

Material changes are published here and noted in the changelog. We do not silently expand what we collect.