Privacy Policy
Last updated: May 21, 2026
1. Introduction
Welcome to MY-OTP-Way ("we", "our", or "us"). We operate an OTP (One-Time Password)
delivery platform that enables businesses and developers to send verification codes to their users via
WhatsApp. This Privacy Policy explains how we collect, use, disclose, and protect your information
when you use our platform at my-otp-way.com and our related services.
By registering or using our services, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect the following types of information:
a) Account Information
- Full name and email address
- Password (stored encrypted)
- Company or business name (optional)
b) Usage Data
- API request logs (timestamp, status, message type)
- Number of OTP messages sent
- IP address and device information for security purposes
c) End-User Phone Numbers
-
When you use our API to send OTPs, we process the recipient phone numbers provided by you.
These numbers are used solely to deliver the OTP message and are not stored permanently
beyond what is required for logging and fraud prevention.
3. How We Use Your Information
- To create and manage your account on our platform
- To deliver OTP messages on your behalf via WhatsApp
- To process payments and manage your wallet balance
- To send you important service notifications and security alerts
- To monitor and prevent fraud or misuse of the platform
- To comply with legal obligations and Meta/WhatsApp platform policies
- To improve and develop our services
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We may share data only in the following limited circumstances:
-
Meta / WhatsApp Business Platform: To deliver OTP messages, we transmit
the recipient phone number and message content through the WhatsApp Business API.
This is governed by Meta's own Privacy Policy.
-
Payment Processors: Payment data is handled by third-party payment
providers and is not stored on our servers.
-
Legal Requirements: We may disclose data if required by law,
court order, or governmental authority.
-
Service Providers: We use trusted hosting and infrastructure providers
who process data strictly on our behalf.
5. Data Retention
We retain your account information for as long as your account is active or as needed to provide
services. OTP message logs are retained for a maximum of 90 days for audit
and support purposes, after which they are automatically deleted. You may request deletion of
your account and associated data at any time.
6. Data Security
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- Hashed and salted password storage
- Two-Factor Authentication (2FA) support
- API key access control with revocation capability
- Regular security reviews
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Export your data in a portable format
- Opt out of non-essential communications
To exercise any of these rights, please contact us at the email address below.
8. Cookies
We use essential session cookies to maintain your login state and platform preferences
(e.g., language selection). We do not use tracking or advertising cookies.
9. Third-Party Services
Our platform integrates with the WhatsApp Business API provided by Meta Platforms, Inc.
When messages are sent through our platform, they pass through Meta's infrastructure and are subject to
WhatsApp's Privacy Policy.
We encourage you to review Meta's policies to understand how your data is handled on their end.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the
"Last updated" date at the top of this page. For significant changes, we will notify
registered users via email. Your continued use of the platform after changes constitutes
acceptance of the updated policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us: