Privacy Policy

Service: GhostNumber

Operator: VIV CRYSTAL SRL

Contact: support@ghostnumber.app

Effective date: May 14, 2026

1. Introduction

This Privacy Policy explains how GhostNumber collects, uses, processes, stores, and protects personal data when you use the GhostNumber platform, website, mobile application, communication features, and related services.

We process personal data in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation (GDPR), where applicable.

2. Service Overview

GhostNumber is a communication platform that allows users to:

• create an account using email and password;
• verify a phone number using SMS verification;
• receive and manage a Twilio-based virtual phone number;
• forward and route calls toward GSM/mobile numbers;
• send and receive conversational SMS messages through assigned virtual phone numbers;
• manage call history, forwarding settings, contacts, and SMS conversations;
• purchase prepaid minutes and virtual number packages;
• manage subscriptions, billing, and account settings.

3. Data We Collect

• Account Data: email address, user ID, authentication status.
• Phone Data: verification phone numbers, forwarding GSM/mobile numbers, assigned virtual numbers.
• Call Data: call timestamps, duration, routing information, status, forwarding information, and call history.
• SMS Data: message timestamps, sender and recipient phone numbers, message delivery status, routing information, carrier-related metadata, and messaging metadata necessary to operate the service.
• Billing Data: purchase history, package type, usage balance, invoices, payment provider information, and subscription/package status.
• Contacts: names and phone numbers saved by the user.
• Technical Data: IP address, browser, device information, operating system, diagnostics, logs, and app version.
• Security Data: verification logs, fraud prevention signals, abuse prevention information, and security event records.

3.1 SMS Content & Messaging Information

In order to provide conversational SMS messaging functionality, GhostNumber may process, transmit, store, synchronize, and display:

• SMS message content;
• conversation history;
• sender and recipient numbers;
• message timestamps;
• delivery status information;
• carrier routing information;
• message identifiers;
• telecommunications metadata;
• conversation synchronization data;
• security and fraud-prevention information.

Such information may be temporarily stored within GhostNumber systems and third-party infrastructure providers necessary to operate messaging functionality.

GhostNumber does not use private message content for advertising, behavioral advertising, marketing profiling, or sale of personal data.

3.2 Telecommunications Security Notice

Users acknowledge that SMS messaging is not an end-to-end encrypted technology.

SMS messages may pass through multiple telecommunications carriers, telecommunications exchanges, mobile operators, cloud providers, and infrastructure systems before reaching recipients.

As a result, no method of telecommunications transmission or cloud-based storage can be guaranteed to be completely secure.

Users should avoid transmitting:

• passwords;
• banking credentials;
• financial account access codes;
• government secrets;
• medical records;
• highly confidential information;
• legally privileged information;
• sensitive authentication data.

8.1 Infrastructure Providers & Telecommunications Processors

GhostNumber relies on third-party infrastructure, telecommunications, cloud, payment, and platform providers in order to operate the service.

Such providers may include:

• Twilio for telecommunications, virtual numbers, SMS routing, and call routing;
• Supabase for authentication, database systems, and application infrastructure;
• Stripe for payment processing;
• Apple App Store and Google Play for in-app purchases and platform billing;
• hosting, cloud, security, and infrastructure providers;
• telecommunications carriers and mobile operators;
• analytics, monitoring, and fraud-prevention providers where applicable.

These providers may process data in different countries depending on infrastructure location, routing requirements, telecommunications systems, and provider operations.

9.1 Retention & Deletion Limitations

Deleted information may temporarily persist within:

• backup systems;
• telecommunications logs;
• security systems;
• carrier compliance systems;
• fraud prevention systems;
• disaster recovery systems;
• provider infrastructure systems.

Deletion from all systems may not occur immediately. Certain records may be retained where necessary for: security, telecommunications compliance, fraud prevention, legal obligations, accounting, dispute resolution, and legitimate operational purposes.

12.1 Abuse Prevention & Compliance Systems

GhostNumber uses automated and manual systems intended to protect the platform, users, telecommunications providers, and carriers from:

• spam;
• fraud;
• phishing;
• telecommunications abuse;
• artificial traffic inflation;
• carrier violations;
• unauthorized automation;
• security threats;
• illegal messaging activity.

Such systems may analyze:

• traffic volume;
• delivery patterns;
• carrier feedback;
• telecommunications metadata;
• routing behavior;
• fraud indicators;
• technical diagnostics.

GhostNumber does not routinely monitor or manually read private conversations as part of ordinary platform operations.

However, limited review, preservation, or disclosure may occur where reasonably necessary for:

• security investigations;
• carrier complaints;
• telecommunications compliance;
• fraud prevention;
• abuse investigations;
• legal obligations;
• court orders;
• law enforcement requests;
• service protection.

4. SMS Verification

SMS verification is used strictly for:

• account verification;
• security protection;
• fraud prevention;
• account recovery where applicable.

We do not send promotional or marketing SMS messages.

GhostNumber may also process conversational SMS messages exchanged through assigned virtual phone numbers. These messages are processed solely to provide communication functionality requested by users.

GhostNumber does not use SMS message content for advertising, behavioral profiling, or unsolicited marketing purposes.

Users are responsible for ensuring that communications sent through GhostNumber comply with applicable laws, carrier policies, and anti-spam regulations.

• spam messaging is prohibited;
• unsolicited bulk messaging is prohibited;
• fraudulent messaging activity is prohibited;
• automated abusive messaging activity is prohibited;
• phishing and deceptive messaging practices are prohibited;

Accounts involved in abusive, automated, unsolicited, or fraudulent messaging activity may be suspended or permanently terminated.

5. How We Use Data

• account creation and authentication;
• phone verification and fraud prevention;
• enabling conversational SMS messaging;
• processing inbound and outbound SMS routing;
• telecommunications compliance and abuse prevention;
• carrier compliance and anti-spam monitoring;
• virtual number provisioning and assignment;
• call routing and forwarding toward GSM/mobile numbers;
• displaying usage balance and call history;
• processing payments and purchases;
• Apple App Store and Google Play in-app purchases;
• invoice generation and accounting compliance;
• customer support and dispute handling;
• service security and abuse prevention;
• legal and regulatory compliance.

6. Legal Basis (GDPR)

• Contract: to provide the GhostNumber service.
• Legal Obligation: accounting, tax, compliance, fraud prevention obligations.
• Legitimate Interest: service security, abuse prevention, diagnostics, and dispute handling.
• Consent: SMS verification where required.

7. Call Data

Call-related data is processed to enable communication between your assigned virtual number, your forwarding GSM/mobile number, and destination numbers.

GhostNumber does not record call audio.

GhostNumber may also process SMS-related metadata associated with messaging functionality, including message routing status, timestamps, sender information, recipient information, and delivery events.

GhostNumber does not sell SMS content or communication metadata to third parties.

8. Data Sharing

• telecommunication and GSM providers, including Twilio, for phone verification, virtual number assignment, SMS delivery, SMS routing, virtual number messaging, and call forwarding/routing;
• Apple App Store and Google Play for in-app purchase processing;
• payment providers such as Stripe for website payments;
• Oblio for invoice generation, accounting, and tax compliance;
• Supabase for authentication, database, and account management;
• hosting and infrastructure providers;
• legal authorities where required by law.

We do not sell personal data.

9. Data Retention

We retain personal data only as long as necessary to operate the service, comply with legal obligations, prevent abuse, resolve disputes, and maintain platform security.

When an account is deleted, active access is removed, authentication access is deleted, virtual numbers may be released, and service functionality is disabled.

Certain records may be retained for up to 4 months for fraud prevention, legal compliance, accounting, dispute handling, and security purposes.

10. Account Deletion

Users can delete their account directly inside the application through:

Manage Account → Delete Account

Deleting an account removes authentication access, disables active services, removes active access, and may release the assigned virtual number.

11. User Rights

Users may request:

• access to personal data;
• correction of inaccurate data;
• deletion of personal data;
• restriction of processing;
• data portability;
• objection to processing where applicable.

Requests can be sent to: support@ghostnumber.app

12. Security

We use reasonable technical and organizational measures to protect personal data and platform security. However, no system can guarantee absolute security.

GhostNumber uses automated and manual abuse prevention systems to detect spam, fraud, unauthorized automation, suspicious messaging activity, carrier policy violations, and platform abuse.

Messaging activity may be temporarily rate-limited or restricted where necessary to maintain platform integrity, carrier compliance, and service reliability.

13. International Processing

Data may be processed in different countries depending on infrastructure, telecommunication, hosting, payment, and cloud providers.

14. Service Limitations

GhostNumber is not an emergency service and must not be used for emergency calls.

GhostNumber messaging services are intended for lawful conversational communication between users and known contacts.

GhostNumber must not be used for:

• unsolicited commercial messaging;
• mass marketing campaigns;
• spam messaging;
• phishing;
• fraudulent activity;
• illegal communication activity;
• deceptive communication practices.

Users remain solely responsible for the content and legality of messages sent through the platform.

15. Changes

We may update this Privacy Policy at any time. The effective date will be updated when changes are made.

16. Contact

Email: support@ghostnumber.app
Operator: VIV CRYSTAL SRL

For messaging compliance, carrier complaints, SMS abuse reports, or telecommunications-related inquiries:

support@ghostnumber.app