Privacy Policy

Last updated: January 2026

Introduction

NexSMS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SMS verification services. We comply with the Singapore Personal Data Protection Act (PDPA) and the European Union General Data Protection Regulation (GDPR).

Information We Collect

We may collect the following information:

  • Account information: email address, username, password (encrypted)
  • Transaction data: payment records, service usage history
  • Technical data: IP address, browser type, device information
  • Usage data: service access times, features used

Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract Performance: To provide our services to you
  • Legitimate Interests: To improve our services and prevent fraud
  • Legal Compliance: To comply with applicable laws and regulations
  • Consent: For marketing communications (with your explicit consent)

How We Use Your Information

  • Provide, maintain, and improve our SMS verification services
  • Process transactions and send related information
  • Send technical notices, updates, and security alerts
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address fraud and security issues

Data Sharing and Transfers

We do not sell your personal data. We may share your information with:

  • Service providers who assist in our operations (under strict confidentiality agreements)
  • Law enforcement or government agencies when required by law
  • Professional advisors such as lawyers and auditors

For international transfers, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. SMS verification codes are automatically deleted within 24 hours of receipt. Account data is retained for the duration of your account and for 30 days after account deletion.

Your Rights

Under PDPA and GDPR, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your personal data
  • Withdraw Consent: Withdraw consent at any time

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us via Telegram: @nextipkf

For EU residents, you also have the right to lodge a complaint with your local data protection authority.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.