VirtualPhone

Your data, handled like
money moving across a border

A top-up carries a phone number, a card and a person on the other end. All three deserve care. This page says plainly what we collect, why we hold it and how you take it back.

It covers virtualphone.app and every recharge sent through it. We are the data controller for that use.

What we collect, and why

We ask for the least we can. Each item below exists because a top-up cannot be delivered or proven without it.

  • Your account details

    Your email address and, if you add one, a name. We use it to send receipts and to answer your messages.

  • The top-up itself

    The number you recharged, the operator, the amount and the currency. We need this to send the credit and to trace an order later.

  • Payment tokens only

    Our payment partner handles your card. We store a token and the last four digits. Raw card numbers never touch our systems.

  • Basic technical data

    Your IP address, browser type and the time of each request. It guards the account against fraud and abuse.

We do not run behavioural ad trackers. Analytics is limited and aggregated. Read the detail on our cookie policy.

Who else sees it

Four parties, and no others. Each gets only the field it needs to do its job.

The mobile operator receives the number and the amount. Our payment processor receives the card, never us. Our hosting and email providers process data on our written instructions. A regulator or court may compel a record. That is the whole list.

Data may be processed outside your country, because operators sit in 80+ of them. Transfers use standard contract clauses approved under the GDPR.

How long we keep each thing

Payment and top-up records
7 years Tax and anti-money-laundering law sets this one, not us.
Support messages
24 months So we can pick up an old thread if the same issue returns.
Security and fraud logs
12 months Then they are deleted on a rolling schedule.
Your account profile
On request Close the account and the profile goes with it.

Rights you can use today

These come from the GDPR (the EU data protection law). We apply them to every customer, wherever you live.

  • Get a copy

    Ask for everything we hold on you. We send it in a readable file within 30 days.

  • Fix a mistake

    Wrong email or name? Tell us and we correct it. No form to fill in.

  • Be deleted

    We erase what the law lets us erase. Paid orders stay for the record period above.

  • Say no

    Withdraw consent for marketing mail at any time. Service mail about your orders continues.

One message starts any of them. No account is closed by accident. We confirm first, then act.

Ask us anything about your data

Write to the address below with the subject line "Privacy". A person reads it. We reply within 30 days, usually far sooner.

If we change this policy, the date at the top changes with it. A material change is announced by email before it takes effect. Your continued use of the service is never treated as silent consent.