INTRODUCTION

This Privacy Policy has been prepared by ShotSMS ("Platform", "We") as the data controller, in accordance with applicable data protection laws.

This document explains how your personal data is collected, processed, transferred, and protected. By using the Platform, you agree to this policy.

1. DATA CONTROLLER

Data Controller: ShotSMS
Email: info@shotsms.com
Web: www.shotsms.com

2. PERSONAL DATA COLLECTED

2.1 Data You Directly Provide

Data Category	Data Types	Collection Purpose
Identity Information	Name, surname (optional)	Account creation
Contact Information	Email address	Account management, notifications
Account Information	Username, password (hashed)	Authentication
Financial Information	Payment transaction records	Billing and accounting

2.2 Automatically Collected Data

Data Category	Data Types	Collection Purpose
Technical Data	IP address, browser type, device info	Security, service improvement
Usage Data	Page views, clicks	Analytics, improvement
Cookie Data	Session, preference cookies	Functionality
Location Data	Country (IP-based)	Language/currency preference

2.3 Service Usage Data

Data Category	Data Types	Retention Period
Order Information	Purchased numbers, services	5 years
SMS Data	Received verification codes	24 hours
Balance Transactions	Loading, spending records	10 years (legal requirement)

3. PURPOSES OF DATA PROCESSING

Your personal data is processed for the following purposes:

3.1 Core Service Purposes

Creating and managing membership registration
Authentication and account security
Providing virtual number and SMS services
Processing payment transactions
Customer support services

3.2 Legal Obligations

Compliance with legal regulations
Providing information to authorized institutions
Tax and accounting obligations

3.3 Legitimate Interest

Fraud and abuse detection
Service quality improvement
Statistical analysis

4. DATA TRANSFER

4.1 Domestic Transfer

Your personal data may be transferred to the following parties:

Payment service providers
Hosting and infrastructure providers
Authorized public institutions (when legally required)

4.2 International Transfer

⚠️ Important Notice:
The Platform provides virtual number services through third-party providers based abroad. In this context:

Your order information (selected country, service, amount) is transmitted to the service provider.
This transfer is necessary for service delivery.
Countries to which data is transferred may not provide "adequate protection."

Your explicit consent is required for international data transfer. By registering or purchasing services, you are deemed to have given this consent. You may withdraw your consent at any time; however, you may not be able to use the services in this case.

5. DATA PROTECTION

5.1 Technical Measures

SSL/TLS encryption
Password storage with hash algorithms
Firewalls and intrusion detection systems
Regular security testing

5.2 Administrative Measures

Access authorization control
Confidentiality agreements
Data processing policies
Employee training

6. RETENTION PERIODS

Data Type	Retention Period	Reason
Account information	Until account deletion + 3 years	Legal statute of limitations
Payment records	10 years	Tax legislation
SMS verification codes	24 hours	Service requirement
Log records	2 years	Security, legal compliance
Cookie data	Session or 1 year	According to preference type

7. YOUR RIGHTS

Under applicable data protection laws, you have the following rights:

Right to Information: Learn whether your personal data is being processed
Right of Access: Request access to processed data
Right to Rectification: Request correction of incomplete or inaccurate data
Right to Erasure: Request deletion of data when conditions are met
Right to Know Transfers: Learn about third parties to whom data is transferred
Right to Object: Object to outcomes arising from automated analysis of processed data
Right to Compensation: Request compensation for damages caused by unlawful data processing

Application Method

You can apply through the following methods to exercise your rights:

Email: info@shotsms.com (write "Privacy Request" in the subject line)

Your application will be concluded free of charge within 30 days at the latest.

8. CHILDREN'S PRIVACY

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect data from persons under 18. If such a situation is detected, the data will be deleted immediately.

9. POLICY CHANGES

We may update this policy from time to time. Important changes will be notified via email or on the Platform. Changes take effect on the date they are published.

10. CONTACT

For privacy-related questions:

Email: info@shotsms.com
Web: www.shotsms.com