Privacy Policy

1.1. Privify is operated by 1st Soft Limited, a company registered in England and Wales ("we", "us", "our").

1.2. We are the Data Controller for the personal data described in this policy. If you have any questions about how we handle your data, contact us at support@privify.co.uk.

2.1. Account information: your email address, collected when you register. We use this to provide the service and send transactional communications.

2.2. Payment information: payment details are entered directly into our payment processor's secure form. We never see or store your card number. We hold a customer reference and subscription ID so we can manage your account.

2.3. Your Privify number: the UK mobile number assigned to your account, where your plan includes one (Plus and Premium plans only).

2.4. Incoming messages: SMS messages received on your Privify number are stored in your account for 90 days (where applicable). Voicemail recordings are stored as audio files and linked to your account (Plus and Premium plans). Voicemail transcriptions are generated and stored on Premium plans only.

2.5. Forwarding email address: the email address you want messages forwarded to (defaults to your account email, can be changed in settings).

2.6. Usage data: basic server logs including IP addresses and request timestamps, retained for up to 30 days for security and debugging purposes.

2.7. Email aliases: aliases you create and the forwarding addresses associated with them.

2.8. Identity monitor data: your account email address is used to check against known breach records. We store check results and any alerts generated. We never store passwords or credentials of any kind.

3.1. We use your data solely to provide and operate the Privify service, including:

• provisioning and maintaining your UK number (Plus and Premium plans);
• forwarding incoming SMS messages to your email (Plus and Premium plans);
• storing your message history in your account inbox (Plus and Premium plans);
• delivering voicemail recordings and transcriptions to your email (Plus and Premium; transcription on Premium only);
• processing and managing your subscription;
• sending transactional emails (payment confirmations, number activation, billing alerts, and breach alerts);
• creating, managing, and forwarding messages through your email aliases;
• monitoring known data breach records and sending you identity monitor alerts.

3.2. We do not use your data for marketing purposes, advertising, or profiling. We will never sell your personal data to third parties.

3.3. Our legal basis for processing is the performance of our contract with you (Article 6(1)(b) UK GDPR) and, where relevant, compliance with a legal obligation (Article 6(1)(c)).

4.1. SMS messages and voicemails are automatically deleted 90 days after receipt.

4.2. When you delete your account, all messages, voicemails, and account data are deleted immediately. Your subscription is cancelled at the same time.

4.3. We may retain certain records for longer where required to comply with a legal obligation (for example, financial records for tax purposes).

5.1. We use a small number of trusted third-party services to operate Privify. These cover areas including authentication, payment processing, voicemail storage, telecoms, and email delivery.

5.2. Each provider is selected on the basis of their security and privacy standards. We share only the minimum data required for each service to function and do not permit any provider to use your data for their own purposes.

5.3. Where any provider is based outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with UK GDPR.

5.4. We will never share your personal data with any third party for marketing or commercial purposes.

5.5. To provide breach alerts, your account email address is checked against third-party breach data sources. Only your email address is shared for this purpose, solely to determine whether it appears in known breach records.

6.1. Under UK GDPR you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate data.
• Right to erasure — to request deletion of your personal data. You can delete your account and all associated data at any time via the Settings section of your account.
• Right to restriction — to ask us to restrict processing of your data in certain circumstances.
• Right to portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing where we rely on legitimate interests.

6.2. To exercise any of these rights, contact us at support@privify.co.uk. We will respond within one calendar month.

6.3. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7.1. We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted storage, access controls, and use of secure HTTPS connections.

7.2. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay.

8.1. The Privify app uses strictly necessary session cookies to keep you logged in. We do not use advertising cookies, tracking cookies, or analytics cookies.

8.2. The Privify marketing website (privify.co.uk) does not use cookies beyond those set by your browser for basic functionality.

8.3. For full details of every cookie we set, who sets it, and how long it lasts, please see our Cookie Policy.

9.1. We may update this Privacy Policy from time to time. We will notify you by email of any material changes at least 14 days before they take effect. The latest version will always be available at this address.

1st Soft Limited

Email: support@privify.co.uk