Virtnumber ("we", "us", "our") operates virtnumber.com (the "Service") and acts as the data controller for the personal data described in this policy. You can reach us any time through our contact page.
We handle personal data carefully and in line with this policy, but nothing here is a guarantee of a particular outcome, of uninterrupted access, or of a security standard beyond what's reasonably achievable. The Service and the information in it are provided without warranties of any kind, consistent with our Terms of Service.
We don't sell your personal data. We share the minimum necessary with:
Unused account credit expires 365 days after your most recent confirmed payment; the balance is set to zero and cannot be restored. Making any payment resets that period.
Financial and order records are kept for as long as required by Estonian accounting and tax law, currently seven years, after which they are deleted. Other account data is kept for as long as your account is active, and deleted or anonymized within a reasonable period after you close your account or request deletion.
We give everyone who uses the Service the same set of rights over their personal data, not only visitors from places where a specific law happens to require it. Because we're established in the EU, we apply one standard globally rather than a different, thinner one for each country. You have the right to:
The rights above are legally guaranteed to you under the GDPR (and the UK GDPR). You also have the right to lodge a complaint with your national data protection authority.
Under the CCPA/CPRA, you have the right to know what personal data we collect, request its deletion, correct it, and opt out of the "sale" or "sharing" of personal data. We don't sell personal data or share it for cross-context behavioral advertising, so there's nothing to opt out of in practice, but the right stands regardless. We won't discriminate against you for exercising it.
Local law may not require any of this where you live. We apply the same rights to you anyway, just contact us and we'll handle the request the same way we would for anyone else.
You can delete your account and its associated data at any time from Account Settings.
Every marketing email includes a one-click unsubscribe link. You can also withdraw marketing consent from Account Settings at any time; this never affects transactional email, such as order confirmations or security notices, needed to run your account.
Some of the providers above may process data outside the EU/EEA. Where that happens, we rely on their own compliance mechanisms, such as EU Standard Contractual Clauses, to keep your data protected to the same standard.
The Service is not directed at children under 16, and we do not knowingly collect personal data from them.
We may update this policy from time to time. Continuing to use the Service after a change means you accept the update.
Contact us for anything in this policy, including exercising any of the rights above.