Privacy Policy

You give us: your name, email address, phone number and password when you register; and the link or username you want an order delivered to.

You create by using the service: your orders, your wallet balance and every transaction in it, the virtual numbers you were assigned and the verification codes received on them, and your support emails.

We record automatically: your IP address and approximate request times, for security and rate limiting; and technical error logs when something fails.

We never see your full card number or bank credentials. Those go directly to Korapay.

• To create and secure your account, and to sign you in.
• To take payment, hold your balance, charge orders and issue refunds.
• To pass your order to the supplier who fulfils it.
• To email you about things that concern your account: verification, password reset, deposit outcome, order status.
• To detect and prevent fraud and abuse, and to comply with the law.

Our lawful bases are performance of our contract with you, our legitimate interest in running the service securely, and our legal obligations. We do not sell your data, and we do not use it for advertising.

When you rent a virtual number, the SMS sent to it passes through our supplier and is stored against your order so you can read it. Treat it as you would any message on shared infrastructure: the supplier can technically see it, and so could we.

Do not use a SharpBooster number for anything sensitive — banking, government identity, or any account you cannot afford to lose control of. The number is shared and will be reused by someone else afterwards.

Peakerr receives the link or username for each social media order. It cannot fulfil the order without it.

GrizzlySMS supplies virtual numbers and handles the SMS sent to them. It does not receive your name or email.

Korapay processes deposits and receives your name, email and payment details.

Resend delivers our emails and therefore receives your email address and the message content.

Supabase hosts our database, in the European Union (Ireland). Our servers are in the Netherlands or the United Kingdom.

We also disclose data where we are legally required to, or to establish or defend a legal claim.

Your data is stored and processed outside Nigeria, principally in the European Union. We rely on the recipients' own data protection commitments and contractual safeguards. If that is not acceptable to you, please do not use the service.

We use one essential cookie: your session, which keeps you signed in. It is not used for tracking and there is no advertising or analytics cookie.

We also keep a copy of the public service catalogue and country list in your browser's local storage, so those pages load instantly on your next visit. This contains no personal data — it is the same list every customer sees — and clearing your browsing data removes it.

Account and order records are kept while your account is open and for up to seven years afterwards, which is the period Nigerian tax and anti-money-laundering rules expect financial records to be retained.

Verification codes and the numbers they arrived on are kept with the order for the same period, because they are the record of what you were sold.

Error logs are kept for a short period and then discarded.

You can ask us to:

• give you a copy of the data we hold about you;
• correct anything inaccurate;
• delete your account;
• restrict or object to a particular use;
• withdraw consent, where we relied on it.

One limit, stated plainly. Your wallet ledger cannot be deleted or edited on request. It is append-only by design, because a record of money that can be quietly rewritten is not a record. If you ask us to delete your account, we close it and remove your personal details, but the financial entries remain for the retention period above, tied to an account identifier rather than to your name.

Write to support@sharpbooster.com. We respond within 30 days. If you are unhappy with our response you can complain to the Nigeria Data Protection Commission.

Passwords are stored hashed, never in readable form. Traffic is encrypted in transit. Access to the production database is limited to those who need it. Payment callbacks are cryptographically verified before any money moves.

No system is perfectly secure. If a breach affects your data we will notify you and the Commission as the law requires.

SharpBooster is not for anyone under 18. We do not knowingly collect data from children, and will delete it if we discover we have.

We will post any change here and update the date at the top. Material changes will be emailed to you.

support@sharpbooster.com

See also our Terms of Service.