Privacy Policy

This Privacy Policy explains how WEBISSO LLC (“WEBISSO,” “we,” “us”) collects, uses, and shares information when you use the RepiySMS website, mobile apps, and related services (the “Service”).

WEBISSO LLC
30 N Gould St.
Sheridan, WY 82801
United States
Phone: +1 (209) 208 0078
Email: [email protected]

1. Who this policy covers

This policy covers visitors to our website, people who use the mobile app as guests, and people who create a registered account. If you contact live chat before you have an account, it also covers the name and email you give us so we can reply.

2. Information we collect

Account and sign-in. If you register, we store your name, email address, a password hash if you use email sign-in, the authentication channel (email, Google, or Apple), and the time you accepted the terms. Google and Apple sign-in is handled through Firebase. We receive the profile details those providers supply, which may include a Firebase user ID, email, display name, and photo URL. We do not receive your Google or Apple password.

Guest use. If you open the app without registering, we create a guest record tied to an install identifier generated and stored on your device (for example in secure storage). That identifier lets us keep a wallet and order history for that install. It is not your phone’s advertising ID.

Wallet and purchases. We store your coin balance, ledger entries (top-ups, OTP and rental charges, refunds, and promo redemptions), and store purchase records. For App Store and Google Play purchases we store platform, product identifier, transaction identifier, coin amount credited, and verification data such as an Apple receipt, App Store server notification payload, or Google purchase token, as needed to confirm the payment and to handle refunds. We do not store your full card number. Apple or Google processes the payment.

Numbers and messages. When you order an OTP or rent a line, we store the country or region, the selected service where applicable, the virtual number, the coin amount charged, order status, timestamps, and the text of SMS messages retrieved for that number so we can show them to you and apply refund rules. Message content may include verification codes and anything else the sender put in the SMS.

Push notifications. If you allow notifications, we store a device push token (Apple Push Notification service and/or Firebase Cloud Messaging), platform (iOS or Android), token type, and an optional device label, so we can alert you when a code or rental SMS arrives. You can turn notifications off in the operating system.

Support. Live chat stores your messages, the name and email on the thread, status, ratings you submit, a visitor token that lets the app reopen the thread, and technical context the app attaches (such as app version, platform, and account id) so support staff can diagnose a problem. Emails you send to [email protected] are handled by our email provider.

Profile image. If we do not have a photo from your sign-in provider, the app may request a Gravatar image using a hash of your email address. You are not asked to upload a photo in the app.

Diagnostics. The mobile app may use Microsoft Clarity to record product-analytics events such as screens and taps, to help us fix usability issues. Clarity is initialized only when its native module is present in the build. Server logs may include IP address, user agent, and request timestamps for security and debugging. Web sessions use a session cookie.

3. How we use information

We use this information to:

• create and secure accounts, including guest sessions;
• sell coin packs, redeem promo codes, and keep your wallet accurate;
• allocate virtual numbers and display SMS messages you requested;
• decide refunds, detect abuse, and enforce our Terms of Service;
• send push alerts you opted into and reply to support requests;
• operate, debug, and improve the Service, including aggregated analytics;
• comply with law, respond to lawful requests, and protect our rights and users.

We do not sell your personal information. We do not use SMS contents to advertise third-party products to you.

4. Legal bases (EEA, UK, and similar laws)

Where the GDPR or a similar law applies, we rely on: performance of a contract (providing the account, wallet, numbers, and messages); legitimate interests (securing the Service, preventing fraud, understanding product usage, and supporting customers), balanced against your rights; consent where required (for example push notifications or non-essential analytics, which you can withdraw in system settings or by contacting us); and legal obligation when we must keep or disclose records.

5. When we share information

We share information with service providers that process it for us:

• upstream SMS and virtual-number providers, which receive the order parameters needed to assign a number and return message text;
• Apple and Google, for in-app purchase validation, subscription-style refund notifications, and push delivery;
• Google Firebase, for authentication and, where used, cloud messaging;
• Microsoft Clarity, for product analytics in the mobile app;
• Gravatar, when the app requests an avatar for your email hash;
• hosting, email, and infrastructure vendors that store or transmit data for us.

We may also share information if we reasonably believe disclosure is required by law, legal process, or to prevent fraud, abuse, or harm, or as part of a merger or sale of the business, in which case this policy will continue to cover the information or you will be notified of a material change.

Support staff can see account details linked to a live chat, including balance, when the visitor is signed in, so they can help with an order.

6. Retention

We keep account, wallet, order, and message records for as long as your account is active and for a reasonable period afterward to handle disputes, refunds, chargebacks, security investigations, and legal duties. Guest records stay until they are merged into a new account, replaced by a sign-in that does not merge, or deleted when no longer needed. Push tokens are removed when you unregister the device or the token becomes invalid. Live chat threads are kept so you and our team can review past conversations. Server logs are kept for a shorter operational period unless we need them for a security incident.

You may ask us to delete a registered account by emailing [email protected]. We will delete or de-identify personal information unless we must keep specific records (for example purchase and fraud-prevention records) for a longer period. Deleting an account does not by itself refund coins already spent or reverse an app-store charge.

7. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export personal information, to object to or restrict certain processing, and to lodge a complaint with a data protection authority. Residents of some U.S. states may have similar access, deletion, and correction rights, and the right to appeal a denial. We will not discriminate against you for exercising a privacy right.

To make a request, email [email protected] from the address on your account and describe what you need. We may need to verify that you control the account. You can also update your display name and password in the app when your sign-in method allows it.

Push permission and analytics can be limited in iOS or Android settings. Guest data on a device can be separated from a later sign-in to an existing account, as described in the Terms of Service.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 13 (or under 16 where that higher age applies). If you believe a child has given us personal information, email [email protected] and we will delete it.

9. International transfers

We are based in the United States. If you use the Service from another country, your information will be processed in the United States and in other countries where our providers operate. Those countries may not provide the same level of data protection as your home country. Where required, we use appropriate safeguards such as contractual clauses with processors.

10. Security

We use technical and organizational measures appropriate to the Service, including hashed passwords, access tokens for the API, and restricted admin access. No method of transmission or storage is completely secure. You are responsible for the security of your device and sign-in credentials.

11. Changes

We may update this policy by posting a new version on this page and changing the date above. If a change is material, we will provide a more prominent notice where it is practical. Continued use after the update means you acknowledge the revised policy.

12. Contact

Privacy requests and questions:

WEBISSO LLC
30 N Gould St.
Sheridan, WY 82801
United States
Phone: +1 (209) 208 0078
Email: [email protected]