Privacy policy

This Policy explains what personal data Ativa SMS collects and what it is used for, under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

1. Who is responsible for your data

The data controller is Ativa SMS. For any privacy matter, including contacting our data protection officer, write to contato@ativasms.store.

2. What data we collect

Data	When	What for
Name, email and password	At sign-up	Create and protect your account. The password is stored encrypted; we have no access to it
Date and version of your acceptance of the Terms	At sign-up	Prove the acceptance
"How did you hear about us?"	At sign-up, if you answer	Understand which channels work. It's optional
Top-ups and balance transactions	When you use the service	Keep your balance and statement
Commission reserve, withdrawal address, requests and transaction hash	In Refer and earn	Calculate commissions and process manual withdrawals
Hashed signup IP and random signup browser identifier	At signup through the website	Flag matching accounts for manual fraud review; no plain IP stored in this collection. Does not identify hardware
Crypto payment data (coin, amount, payment address and transaction identifiers)	On crypto top-ups	Confirm the payment and credit your balance
Numbers activated and SMS received	When you activate a number	Deliver the code to you and issue the automatic refund when needed
Pages visited, referring site, country and device type	When you browse the website	Count visits and learn which pages and channels work. No cookie: we don't store your IP address or link the visit to your account, and the visit identifier changes every day. Kept for 13 months
Website use in Google Analytics and Microsoft Clarity: pages viewed, referring site, device, approximate city and country, steps such as sign-up, top-up, number purchase and code received (with app, country and amount) and recordings of how you browse (clicks, scrolling and movement on the page)	Only if you accept cookies	Understand how the website is used and improve the service. See section 3

We don't collect any national ID number at sign-up. If you pay by Pix (Brazil only), the bank and the payment service may send us payer data, such as name and CPF, which we use to confirm payment, review commission fraud and meet legal obligations.

3. Cookies

Necessary cookies (always on): keep you logged in to your account and store your language and cookie choices for 1 year. At signup, a random browser identifier (cadastro_aparelho, valid for 1 year) helps flag accounts created in the same browser for commission fraud review.

Google Analytics (only if you click "Accept" on the cookie notice): we use Google Analytics 4, a Google service, to understand how the website is used. It sets the _ga and _ga_<ID> cookies, which last up to 2 years (Google's default). We don't send Google your name, your email, the numbers you activate or the content of the SMS. The data is kept in Google Analytics for 14 months, Google's advertising features are turned off, and Google may process this data on servers outside Brazil.

Microsoft Clarity (also only with "Accept"): records how you browse the website (clicks, scrolling and movement on the page) so we can find confusing or broken parts. It uses the _clck and _clsk cookies, set on our website, and Microsoft's own cookies, such as MUID and CLID. Email, phone numbers, received codes and balance are blurred in recordings, and what you type when signing up, logging in, contacting support, topping up or rating a number is not recorded. Microsoft may process this data on servers outside Brazil.

If you decline, nothing is sent to Google Analytics or Microsoft Clarity. You can change your choice at any time with the Cookies link in the website footer; when you decline, we delete the Google Analytics cookies and the _clck and _clsk cookies from your browser.

We don't use advertising cookies.

4. How long we keep data

• Account data: for as long as the account exists.
• Balance transactions and payments.
• Google Analytics data (only for people who accepted cookies): 14 months.
• After these periods, the data is deleted or anonymized.

5. Security

We use an encrypted connection (HTTPS), encrypted passwords and access rules that prevent one customer from seeing another's data. No system is completely immune to failures; if an incident occurs that may put you at risk, we will notify you and Brazil's data protection authority (ANPD).

6. Minors

The service is intended for people aged 18 or older.

7. Changes to this Policy

We may update this Policy. The version and date of the last update appear at the top of this page, and significant changes will be announced by email or on the website.