Privacy Policy

Last Updated: October 1, 2026

This Privacy Policy explains how oceansim.io ("oceansim.io", "Oceansim", "we", "us", or "our") collects, uses, stores, protects, and discloses information when you access or use the oceansim.io website, customer dashboard, APIs, virtual-number services, SMS reception services, and related products and services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service.

1. Who We Are

The Services are provided under the brand oceansim.io.

Our current business address is:

oceansim.io
7 Universitetskaya Street
Innopolis, Republic of Tatarstan
420500
Russia

At this time, oceansim.io is the name used for the Services. If our legal entity structure changes in the future, this Privacy Policy may be updated accordingly.

For privacy-related questions or requests, you may contact us through the support or contact channels published on the oceansim.io website.

2. Scope of This Privacy Policy

This Privacy Policy applies to information we process when you:

• Visit the oceansim.io website;
• Create an account;
• Sign in to your account;
• Purchase or activate a virtual Number;
• Receive SMS or OTP messages;
• Use our API;
• Add funds to your account;
• Contact customer support;
• Use other Oceansim Services.

This Privacy Policy does not govern the privacy practices of third-party websites, applications, telecommunications providers, cryptocurrency payment providers, or other services that you may access using an Oceansim Number.

Those services have their own privacy policies.

3. Information We Collect

We collect information reasonably necessary to operate, secure, improve, and provide the Services.

The categories of information we may collect include the following.

3.1 Account Information

When you create an Oceansim Account, we may collect:

• Email address;
• Password credentials in securely stored form;
• Account identifier;
• Account status;
• Registration date;
• Login information;
• Authentication information;
• Google account information when you use Google Sign-In;
• Other information you voluntarily provide to us.

We do not store your account password in plain text.

4. Google Sign-In

Oceansim may allow you to register or sign in using Google.

When you choose Google Sign-In, we may receive limited information provided by Google, such as:

• Google account identifier;
• Name;
• Email address;
• Profile picture, where provided.

We do not receive your Google password.

We use Google account information for purposes such as:

• Creating your Oceansim Account;
• Authenticating you;
• Linking your Google account with your Oceansim Account;
• Maintaining your account;
• Providing account-related communications.

We do not request access to unrelated Google services unless a future feature specifically requires such access and you separately authorize it.

Google account information will not be sold.

Processing of Google account information may also be subject to Google's applicable terms and privacy policies.

5. Authentication and Session Cookies

Oceansim uses secure, token-based authentication for its Services.

For the Oceansim web application, authentication information may be stored in HttpOnly, Secure cookies.

These cookies allow the browser to maintain an authenticated session and automatically provide the necessary authentication information when communicating with the Oceansim application.

Depending on the authentication architecture in use, these cookies may contain or reference authentication/session credentials.

Our authentication cookies are designed so that they cannot normally be accessed directly by JavaScript running in the browser when the `HttpOnly` attribute is enabled.

We may use security attributes such as:

• `HttpOnly`;
• `Secure`;
• `SameSite`;
• Appropriate cookie expiration;
• Appropriate cookie path and scope.

These controls are intended to reduce the risk of unauthorized access, session theft, and certain types of web attacks.

Authentication cookies are used to:

• Keep you signed in;
• Authenticate requests;
• Protect your account;
• Maintain secure application sessions;
• Determine whether you are authenticated;
• Protect authenticated resources.

We do not use authentication cookies for advertising or selling Personal Information.

6. API Authentication

Oceansim may provide APIs that use separate authentication credentials.

Depending on the API and its implementation, authentication may use:

• Bearer tokens;
• API keys;
• Other authentication credentials.

API credentials are used to authenticate and authorize API requests.

API credentials should be treated as confidential.

You are responsible for protecting your API credentials and should not intentionally share them with unauthorized persons.

7. Cookies and Similar Technologies

Oceansim uses cookies and similar technologies where reasonably necessary to operate and secure the Services.

Cookies may include the following categories.

7.1 Strictly Necessary Cookies

These cookies are required for the operation and security of the website or application.

They may be used for:

• Authentication;
• Maintaining secure sessions;
• Security;
• Fraud prevention;
• Session management;
• Load balancing or infrastructure functionality;
• Maintaining necessary application state.

The Services may not function correctly if these cookies are disabled.

These cookies are not used for behavioral advertising.

7.2 Functional Cookies

Where implemented, functional cookies or similar technologies may remember certain choices or application settings to improve the user experience.

Examples may include:

• Language preferences;
• Interface preferences;
• Application configuration;
• Other functionality requested by the user.

7.3 Analytics Cookies

Oceansim may introduce analytics technologies in the future to understand website and application usage.

Where analytics cookies are used, they may help us understand:

• Website traffic;
• Feature usage;
• Application performance;
• Errors;
• General usage patterns;
• User interaction with the Services.

Where applicable law requires consent for non-essential analytics cookies, Oceansim will obtain the appropriate consent before placing those cookies.

7.4 Advertising and Tracking Cookies

Oceansim does not currently use cookies for behavioral advertising or cross-site advertising tracking.

If this changes in the future, we will update this Privacy Policy and provide any consent or notice required by applicable law.

8. Managing Cookies

You can generally control or delete cookies through your browser settings.

However, disabling necessary authentication or security cookies may prevent you from:

• Signing in;
• Remaining authenticated;
• Accessing your account;
• Using certain features of the Services.

The exact cookie-management options depend on your browser and device.

9. Information About Your Use of Oceansim

When you use the Services, we may collect information relating to your activities, including:

• Numbers purchased or activated;
• Country selected;
• Service selected;
• Activation identifiers;
• Activation status;
• Activation timestamps;
• SMS delivery status;
• SMS/OTP content received through the Services;
• Number-related information;
• API requests;
• API usage;
• Account Balance;
• Transactions;
• Refunds;
• Account activity;
• Support requests;
• Other information necessary to provide the Services.

This information is required to operate the virtual-number and SMS platform.

10. SMS and OTP Information

Because Oceansim provides SMS reception services, the Platform may process SMS messages received by Numbers made available through the Services.

This may include:

• SMS content;
• OTP or verification codes;
• Sender information;
• Recipient Number;
• Message timestamp;
• Delivery status;
• Related technical metadata.

SMS information is processed to:

• Provide the requested Service;
• Display received messages to the User;
• Operate the Platform;
• Troubleshoot problems;
• Prevent abuse;
• Maintain security.

Users should understand that SMS messages received through the Services may contain sensitive information originating from third-party services.

You should not intentionally use Oceansim to receive highly sensitive information unless the relevant Service expressly permits such use.

11. Numbers and Third-Party Suppliers

Oceansim obtains Numbers and telecommunications/SMS connectivity from third-party Suppliers.

Oceansim does not originate or independently operate the underlying telephone Numbers.

Suppliers may provide information necessary to:

• Provision Numbers;
• Route SMS messages;
• Process activations;
• Determine Number availability;
• Deliver SMS messages;
• Monitor technical performance;
• Resolve technical problems.

Numbers may be:

• Newly assigned;
• Previously assigned;
• Recycled;
• Reassigned;
• Previously used by another person or organization.

Because Numbers may be supplied or recycled by third-party telecommunications providers, Oceansim cannot guarantee that every Number has never previously been used.

Information associated with a Number may therefore exist within third-party telecommunications systems independently of Oceansim.

Oceansim does not represent that a Number provided through the Services is necessarily a newly created or previously unused Number.

12. Information We Receive From Third-Party Suppliers

Our telecommunications and SMS Suppliers may provide information necessary for operating the Services.

This may include:

• Number information;
• Country information;
• Network information;
• Provider information;
• SMS delivery information;
• Activation information;
• Technical information;
• Availability information.

We use this information to provide and maintain the Services.

13. Payment and Cryptocurrency Information

Oceansim may use third-party cryptocurrency payment providers, processors, gateways, and blockchain networks to process payments and account funding.

We do not currently process traditional card or bank-payment information directly through Oceansim.

Depending on the payment method used, we may receive information such as:

• Payment status;
• Transaction identifier;
• Cryptocurrency asset;
• Blockchain network;
• Payment amount;
• Payment address or related transaction information;
• Confirmation status;
• Refund status;
• Fraud or compliance signals provided by the payment provider.

Your cryptocurrency wallet address may be visible to us or to the relevant payment provider as part of processing a transaction.

We do not generally receive or store your private cryptocurrency wallet keys or seed phrases.

You should never provide your private wallet keys or seed phrase to Oceansim.

Third-party payment providers process information according to their own privacy policies.

14. Technical and Security Information

When you access the Platform, we may automatically collect technical information necessary for operation and security.

This may include:

• IP address;
• Browser type;
• Operating system;
• Device information;
• Approximate geographic information derived from IP address;
• Request timestamps;
• API request information;
• Login events;
• Authentication events;
• Error logs;
• Security logs;
• Network information;
• Performance information.

We use this information primarily for:

• Security;
• Fraud prevention;
• Abuse detection;
• Troubleshooting;
• Platform operation;
• Performance monitoring;
• Service reliability.

15. Information You Provide to Customer Support

If you contact Oceansim Support, we may collect information contained in:

• Support tickets;
• Emails;
• Chat conversations;
• Screenshots;
• Technical information;
• Account information;
• Information you voluntarily provide during troubleshooting.

We use this information to:

• Respond to your request;
• Resolve technical problems;
• Investigate transactions;
• Investigate abuse or fraud;
• Improve customer support;
• Maintain records of support interactions.

16. Artificial Intelligence and Automated Systems

Oceansim may use automated systems and artificial intelligence tools to assist with:

• Customer support;
• Ticket classification;
• Troubleshooting;
• Fraud and abuse detection;
• Security monitoring;
• Service operations;
• Documentation;
• Product improvement;
• Internal analysis.

Where third-party AI or automation providers process information on our behalf, we seek to limit the information provided to what is reasonably necessary for the relevant purpose.

We do not authorize third-party AI providers to use Oceansim customer information for unrelated advertising or purposes inconsistent with the applicable service arrangement.

Where appropriate, sensitive information may be minimized, filtered, or restricted before being processed by automated systems.

17. How We Use Personal Information

We may use information for the following purposes.

17.1 Providing the Services

To:

• Create and maintain your account;
• Authenticate you;
• Provide virtual Numbers;
• Process Activations;
• Deliver SMS;
• Display OTPs;
• Provide API access;
• Process account transactions;
• Provide customer support.

17.2 Security and Fraud Prevention

To:

• Detect suspicious activity;
• Prevent fraud;
• Prevent abuse;
• Protect user accounts;
• Protect Oceansim infrastructure;
• Detect unauthorized access;
• Investigate security incidents.

17.3 Payments

To:

• Confirm cryptocurrency payments;
• Credit account Balance;
• Process refunds where applicable;
• Resolve payment problems;
• Investigate suspicious transactions;
• Maintain financial records.

17.4 Platform Improvement

To:

• Monitor performance;
• Fix technical problems;
• Improve reliability;
• Understand how features are used;
• Develop new features;
• Improve user experience.

17.5 Legal Compliance

To:

• Comply with applicable laws;
• Respond to lawful requests;
• Protect our legal rights;
• Prevent illegal activity;
• Maintain required records;
• Resolve disputes.

18. Legal Bases for Processing

Depending on your location and applicable law, we may process Personal Information on one or more of the following legal bases:

Performance of a Contract

Processing may be necessary to provide the Services you requested and perform our agreement with you.

Legitimate Interests

Processing may be necessary for legitimate interests such as:

• Security;
• Fraud prevention;
• Platform operation;
• Service improvement;
• Abuse prevention;
• Technical support.

Legal Obligations

Processing may be necessary to comply with applicable legal obligations.

Consent

Where required by applicable law, we may rely on your consent for specific processing activities.

Where processing is based on consent, you may withdraw your consent where permitted by applicable law.

19. Who We Share Information With

We may share information with third parties where reasonably necessary to operate and secure the Services.

These parties may include:

Telecommunications and Number Suppliers

Information may be shared with Suppliers when necessary to:

• Provision Numbers;
• Route SMS;
• Process Activations;
• Deliver messages;
• Troubleshoot telecommunications issues.

Payment Providers

Information may be shared with third-party cryptocurrency payment providers to:

• Process payments;
• Confirm transactions;
• Process refunds;
• Detect payment fraud;
• Meet applicable compliance requirements.

Hosting and Infrastructure Providers

We may use third-party providers for:

• Cloud infrastructure;
• Databases;
• Storage;
• Networking;
• Monitoring;
• Security;
• Backup systems.

Email and Communication Providers

We may use third-party providers to send:

• Account emails;
• Security notifications;
• Payment notifications;
• Support communications.

Customer Support and AI Providers

Where applicable, information may be shared with service providers that help us operate customer support, automation, or AI-assisted support systems.

Professional Advisers

Information may be disclosed to:

• Lawyers;
• Accountants;
• Auditors;
• Security professionals;
• Other professional advisers,

where reasonably necessary.

Authorities

We may disclose information to competent authorities where:

• Required by applicable law;
• Required by valid legal process;
• Necessary to protect rights or safety;
• Necessary to investigate suspected illegal activity.

20. We Do Not Sell Personal Information

oceansim.io does not sell your Personal Information to data brokers, advertisers, or other third parties.

We may share information with service providers acting on our behalf where necessary to provide, secure, maintain, or improve the Services.

We do not authorize such providers to use your Personal Information for unrelated purposes except where required or permitted by applicable law.

21. International Data Processing

Because Oceansim may use infrastructure and service providers located in different countries, your information may be processed or stored outside your country of residence.

These locations may include countries where our:

• Hosting providers;
• Infrastructure providers;
• Payment providers;
• Telecommunications Suppliers;
• Email providers;
• Support providers;
• Other service providers

operate.

Where required by applicable law, we will take reasonable steps to implement appropriate safeguards for international transfers.

22. Data Retention

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may depend on:

• The type of information;
• The purpose for which it was collected;
• Whether your account remains active;
• Legal requirements;
• Fraud-prevention requirements;
• Accounting requirements;
• Dispute resolution;
• Security requirements.

For example, information associated with an active account may need to be retained while the account remains active.

Transaction and accounting records may need to be retained for longer periods where required by applicable law.

Security and fraud-related records may also be retained where reasonably necessary to protect the Platform.

We will periodically review retained information and delete or anonymize information that is no longer reasonably required, subject to legal and operational requirements.

23. Account Deletion

You may request deletion of your Oceansim Account and Personal Information by contacting Oceansim Support.

Before completing a deletion request, we may need to verify your identity or ownership of the relevant Account.

Deletion may not immediately remove information that we are legally required or reasonably permitted to retain, including information required for:

• Legal compliance;
• Accounting;
• Tax requirements;
• Fraud prevention;
• Security;
• Dispute resolution;
• Enforcement of our Terms.

Once information is no longer required for these purposes, it will be deleted or anonymized where reasonably practicable.

24. Security

We take reasonable technical, administrative, and organizational measures designed to protect Personal Information against:

• Unauthorized access;
• Unauthorized disclosure;
• Loss;
• Destruction;
• Modification;
• Misuse.

Security measures may include:

• HTTPS/TLS encryption;
• Secure HttpOnly authentication cookies;
• Secure cookie attributes;
• Access controls;
• Authentication controls;
• Password hashing;
• Database access restrictions;
• Infrastructure security;
• Logging and monitoring;
• Backup controls;
• Least-privilege access;
• Security monitoring.

No internet-based service can guarantee absolute security.

You are responsible for maintaining the security of your account credentials, API keys, devices, and other authentication information.

25. API Data

If you use the Oceansim API, we may process information relating to:

• API credentials;
• API requests;
• API responses;
• Account identifiers;
• Activation identifiers;
• Numbers;
• Service selections;
• Country selections;
• Request timestamps;
• Usage and rate-limit information;
• Error information.

API activity may be logged for:

• Security;
• Debugging;
• Billing;
• Abuse prevention;
• Service reliability;
• Compliance.

You are responsible for ensuring that information submitted through the API is lawful and appropriate.

26. Children's Privacy

The Services are not intended for individuals who are not legally permitted to enter into binding agreements under applicable law.

We do not knowingly collect Personal Information from children where such collection is prohibited by applicable law.

If you believe that a child has provided Personal Information to Oceansim in circumstances where it should not have been collected, please contact us.

27. Third-Party Websites

The Oceansim website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security, content, or policies of third-party services.

When you access a third-party website or use a third-party application with an Oceansim Number, that third party's privacy policy applies to its processing of your information.

28. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• The right to access Personal Information we hold about you;
• The right to request correction of inaccurate information;
• The right to request deletion;
• The right to request restriction of processing;
• The right to object to certain processing;
• The right to withdraw consent where processing is based on consent;
• The right to request portability of certain information;
• The right to lodge a complaint with a competent data-protection authority.

These rights may be subject to legal limitations and exceptions.

29. How to Exercise Your Rights

To exercise applicable privacy rights or ask questions about this Privacy Policy, contact Oceansim through the support or contact information published on:

oceansim.io

We may request reasonable information to verify your identity before fulfilling a privacy request.

This is intended to prevent unauthorized persons from obtaining, modifying, or deleting Personal Information.

30. Data Breaches and Security Incidents

If Oceansim becomes aware of a security incident involving Personal Information, we will assess the incident and take reasonable steps to contain, investigate, and remediate it.

Where notification is required by applicable law, we will notify affected individuals and/or relevant authorities within the timeframe required by law.

31. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When changes are made, we will update the "Last Updated" date at the beginning of this document.

Material changes may be communicated through the Platform or other appropriate channels where required by applicable law.

Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgement of the updated policy to the extent permitted by law.

32. Contact Us

If you have questions about this Privacy Policy, your Personal Information, or privacy requests, please contact Oceansim through the support or contact channels available on the Platform.

oceansim.io

7 Universitetskaya Street

Innopolis, Republic of Tatarstan

420500

Russia

Website: oceansim.io

33. Language

The English version of this Privacy Policy is the authoritative version unless otherwise required by applicable law.

Translations may be provided for convenience.

If there is a conflict between a translated version and the English version, the English version will prevail to the extent permitted by applicable law.