Privacy Policy

1. Introduction & Commitment to Privacy

OTPMailbox ("we", "us", or "our") provides high-speed telecommunications, temporary verification mailboxes, and automated API infrastructure for software QA testing and developer workflows. We are dedicated to protecting your personal information and upholding the highest international standards of data governance. This Privacy Policy describes how we collect, handle, and protect data across otpmailbox.com and associated REST API endpoints.

2. Zero-Retention Ephemeral Architecture

Our verification pipeline is engineered on strict Zero-Retention principles:

• Temporary In-Memory Processing: Verification messages received through our automated nodes are processed entirely in ephemeral volatile memory.
• Immediate Purging: Once a verification code is delivered to your client session or retrieved via API, the temporary message payload is instantly and permanently scrubbed from memory.
• Strict Automated TTL Expiry: Any unclaimed verification mailbox automatically expires and self-destructs after its designated lease window (maximum 10–15 minutes), leaving zero residual message logs or archival records.

3. Information We Collect

We collect only the minimal data strictly required to provision and secure your developer account:

• Account Credentials: Your registered email address and an industry-standard salted cryptographic hash of your authentication password (or cryptographic identity token when signing in via verified single sign-on).
• Financial Ledger Records: Numerical account credit balance, transaction reference IDs, and payment settlement confirmations necessary to maintain account balances.
• Security & Operational Telemetry: Standard HTTP request metadata (timestamp, user agent, anonymized IP hash) utilized exclusively for rate-limiting, DDoS mitigation, and anti-abuse defense.

4. Third-Party Service Providers

We work exclusively with reputable global enterprise infrastructure partners to deliver reliable service:

• Transactional Email Gateways: Enterprise cloud delivery infrastructure dispatches account security verification codes, welcome emails, and password resets via encrypted TLS channels.
• Single Sign-On (SSO): Optional token-verified authentication through Google Identity Services. We only verify the cryptographic identity token to authenticate your account.
• Payment Processors: Balance top-ups are processed via authorized, cryptographically secured payment gateways. We never collect, process, or store raw payment card numbers or sensitive banking credentials on our servers.
• Global Edge Network & Security: Enterprise CDN infrastructure terminates SSL/TLS 1.3 connections, accelerates routing, and mitigates distributed denial-of-service (DDoS) attempts.

5. Data Security Standards

All platform communications and API sessions are protected by modern TLS 1.3 encryption in transit. User passwords and access tokens are secured with high-work-factor cryptographic hashing. All underlying storage clusters and internal services operate within private, secure VPC network perimeters with zero direct public internet exposure and continuous automated access controls.

6. Cookies & Local Storage Policy

We use strictly necessary technical session cookies and local storage tokens solely to maintain your authenticated login state, language preferences, and CSRF protection tokens across page navigation. We do not use third-party tracking cookies for behavioral ad profiling, nor do we sell, rent, or trade your personal data with third-party advertisers.

7. Your Rights & Data Erasure (GDPR & CCPA)

Under applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you maintain the right to access, rectify, or request permanent deletion of your customer profile, wallet records, and associated API tokens. To request complete account erasure, contact our privacy desk at [email protected].

8. Disclaimer & Third-Party Trademarks

OTPMailbox is an independent software QA and electronic verification infrastructure provider. All third-party product names, logos, and trademarks mentioned on this website (such as Google, Microsoft, Yahoo, etc.) are the property of their respective owners. Mention of any third-party brand is purely for descriptive, technical identification purposes and does not indicate any affiliation, sponsorship, or endorsement.

9. Contact & Compliance Inquiries

If you have any questions, regulatory inquiries, or privacy-related concerns regarding our zero-retention infrastructure, please reach our compliance team:
Email: [email protected]
Official Website: https://otpmailbox.com