Privacy Policy

Information We Collect

We collect the email address and username you give us when you register, your password (stored only as a bcrypt hash), and the records needed to run your account: wallet balance and deposit history, purchases and boosting orders, messages you send to our support assistant, and the details of each SMS session you start (the number, the service and the country you requested). If you sign in with Google, we receive your Google email address and basic profile details, and we store a Google account identifier so you can sign in again. We do not collect advertising identifiers or build a marketing profile of you.

Data Security

Passwords are hashed with bcrypt and are never stored or recoverable in plain text. We never see or store your card or bank details — deposits are processed entirely by our payment gateways, Flutterwave and Korapay. Sign-in is carried by a signed token issued to your browser after you log in; we set no advertising or tracking cookies.

SMS Logs

The details of a verification — the number, the service it was used for, and the code that arrived — are stored so they can be shown to you in your dashboard while the session is active. Sessions expire automatically, and an expired session can no longer receive a code. These records are kept for support, refunds and dispute resolution; we do not sell SMS content and we do not use it for marketing.

Data Stored on Your Device

BlissVerify keeps a small amount of data in your browser so the app works and you stay signed in:

• a session token, so you are not asked to sign in on every page;
• a cached copy of your profile and of some catalogue and order views, so pages open instantly;
• your preferences — theme, whether your balance is hidden, and onboarding flags;
• a pending deposit reference, so a deposit you started can be completed.

Installed on your home screen, the app also caches its own pages, stylesheets, scripts and icons so it opens without a network. Only those static files are cached: everything that comes from our API — your balance, wallet, live SMS codes and session data — is always fetched from our servers and is never stored in that cache. We run no advertising or analytics trackers. You can clear everything we store on your device at any time by signing out and clearing site data in your browser settings; removing the app from your home screen also removes its cache.

Third Parties

We do not sell your personal data and we do not share it for marketing. We share only what is needed to deliver what you asked for:

• SMS providers — to issue the number and receive your code;
• Payment gateways (Flutterwave, Korapay) — to process deposits and refunds;
• Email delivery providers (Brevo, Resend) — to send verification and notification emails to your address;
• OpenAI — when you use the built-in support assistant, the text of the message you type, plus the recent turns of that conversation, is sent to generate the reply. Your email address, password and wallet balance are not included in that request.

Your Data & Contact

You can ask for a copy of your account data, or for your account and its data to be deleted, at any time through support on WhatsApp. Deposits, refunds and completed orders may be kept after deletion where we need them for accounting, tax or fraud prevention. If we change how we handle your data, we will update this page and the “Last updated” date above.