Privacy Notice

Who is responsible for your information?

Otpee operates the marketplace at otpee.online. For privacy questions or requests, email support@otpee.online or use the Contact support pill on the marketplace.

This notice applies to the Otpee website, account dashboard, wallet, SMS verification, email verification, call verification and number rental features.

What we collect

Account detailsEmail address and account timestamps. Passwords are processed into a one-way hash; Otpee does not need to read your password.

Wallet and transfer detailsDeposit amount, Otpee reference, transfer status and receipt screenshots, including any sender or bank details visible in the receipt.

Order detailsSelected country, service or website, email domain, price, order status, temporary phone number or email address, received codes and messages, call-result text or caller details when supplied, rental periods, expiry and extension records, and supplier identifiers needed to operate an order. Call audio is not collected by the call-verification feature.

Security and device dataSession and CSRF cookies, IP address used for rate limits and abuse prevention, request timestamps and error references.

Website analyticsGoogle Analytics receives page views, general browser/device information and an anonymous browser identifier. When a wallet deposit is approved, it also receives the amount in NGN and Otpee's random transfer reference. We do not send your email address or receipt image to Analytics.

Messages you sendSupport messages, your contact email, order or transfer references, and images you upload when support enables image sharing. Avoid including passwords, verification codes or bank login details.

Why we use it

Create and secure your account, keep you signed in and prevent unauthorised actions.
Create transfer tickets, match submitted deposits and maintain an accurate closed-loop wallet ledger.
Quote, create and manage verification orders and rentals, show messages or call results, process rental extensions and return eligible order credit.
Apply rate limits, investigate fraud or abuse, keep the service reliable and respond to support requests.
Meet applicable legal, accounting, security and dispute-resolution obligations.

Depending on the activity and applicable law, processing may be needed to provide the contract you request, meet a legal obligation, protect the service or respond to your consent.

Who receives information?

We share only what is needed for the purpose:

Verification and rental providers: selected service or website, country or domain, duration and order information required to fulfil and manage the purchase. Use of that supplier is subject to its own terms and privacy notice.
Cloud infrastructure: hosting, database, security and delivery providers that process information on Otpee’s instructions.
Payment processing: when you use PayMonetra checkout, PayMonetra processes your payment, the checkout amount and reference, and the details you provide on its checkout page. Otpee receives payment confirmation, transaction references, amounts and fees to credit and reconcile your wallet. We do not receive your bank password or PIN.
Google Analytics: receives website usage information and approved deposit totals to help us understand site activity and funding. Advertising personalisation signals are disabled.
Support delivery: customer messages, contact emails and enabled image uploads are relayed through Telegram to authorised support staff. Deposit receipts and account/order alerts may also be sent to private administrative Telegram chats for review.
AI support: when enabled, Groq processes recent chat text and limited account context, such as wallet balance and recent order/deposit status, to draft replies. Account email, stored verification codes and API credentials are excluded from the account context, but information you type into the chat may still be included.
Account and deposit emails: Resend processes your email address and message content for verification, password recovery and deposit approval or rejection notices.
Professional advisers: where needed to investigate a dispute or comply with law.
Authorities: where disclosure is required by valid legal process or needed to protect users, the service or the public.

We use Meta Pixel to measure visits and the effectiveness of our advertising. Meta may receive page URLs, browser and device information, IP addresses and browser identifiers, and may associate those events with its own account data. We do not intentionally send passwords, verification codes, receipt images or email-message contents through the Pixel. Do not submit passwords, bank login details or a verification code in a support message.

Cookies, retention and your choices

Essential cookies and browser storage

The dashboard uses an HttpOnly session cookie and a CSRF cookie to authenticate and protect requests. The storefront may temporarily keep a selected purchase in browser session storage so you can continue after signing in. Browser sessions expire 24 hours after login and do not renew just because you keep browsing. These are service functions, not advertising cookies. If you block them, sign-in and purchases may not work.

Analytics

Meta Pixel uses browser identifiers and cookies for advertising measurement. Our server also sends verified registrations and approved wallet funding to Meta through Conversions API. These events may include the funding amount and NGN currency, an event reference, hashed account email and account identifier, IP address, browser user agent and available Meta browser/click identifiers. Hashing is not anonymisation. We do not send purchased verification numbers, purchased email addresses, codes, message contents or receipt images as matching data. We honour the Global Privacy Control signal for this integration. You can manage advertising preferences through Meta and restrict browser tracking using your browser settings or an ad-blocking extension; a browser blocker alone does not necessarily block server-side events. Automatic form matching is not enabled by our integration.

Google Analytics uses an anonymous browser identifier to measure page visits. It does not receive your email address or receipt image. We disable advertising personalisation signals. You can block Analytics through your browser's privacy settings or an ad-blocking extension.

Retention and security

We keep information only for as long as needed to provide the service, prevent abuse, handle disputes, maintain accounting records and meet legal obligations. We then delete or anonymise it when reasonably practical. Passwords are hashed, requests are protected with same-origin and CSRF checks, and no internet service can promise perfect security.

Your privacy requests

Depending on applicable law, you may ask for access, correction, deletion, restriction, objection, portability or information about processing. Return to the marketplace, use the Contact support pill from the account email and include enough detail for us to verify the request. You may also have the right to complain to the relevant data-protection authority.

Children, changes and contact

Otpee is for adults aged 18 and over. Do not create an account or submit someone else’s information without authority. If you think a child has provided information, contact us so we can review it.

We may update this notice when the service or law changes. The “last updated” date above will change with it. Questions and privacy requests can be sent through the Contact support pill on the marketplace.