Legal Privacy Policy

Privacy Policy

How we collect, use, and protect your personal information.

Last updated: January 5, 2026

Introduction

At NepalOTP, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SMS and OTP verification services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

Information We Collect

Personal Information

We collect information that you provide directly to us when you:

  • Create an account
  • Use our services
  • Contact our support team
  • Subscribe to our newsletter

This information may include:

  • Name and contact information (email address, phone number)
  • Business information (company name, business type)
  • Payment information (processed securely through third-party payment processors)
  • Account credentials

Service Usage Information

When you use our services, we automatically collect:

  • API usage logs and statistics
  • Phone numbers to which OTPs and SMS are sent
  • Message content and delivery status
  • IP addresses and device information
  • Browser type and version
  • Time zone settings and location data

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our services
  • Process your transactions and send transactional communications
  • Improve, personalize, and expand our services
  • Understand and analyze how you use our services
  • Develop new products, services, features, and functionality
  • Communicate with you for customer service, updates, and marketing purposes
  • Send you technical notices and support messages
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms

Data Sharing and Disclosure

Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

  • Payment processing
  • SMS delivery infrastructure
  • Cloud hosting and storage
  • Analytics and monitoring
  • Customer support tools

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or to protect our rights, privacy, safety, or property.

Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company, user information may be transferred.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Secure API communication protocols
  • Regular backup and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Service usage logs and message delivery records are typically retained for 90 days for operational purposes and compliance requirements.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Objection: Object to our processing of your personal information
  • Portability: Request transfer of your information to another service
  • Withdrawal of Consent: Withdraw consent for data processing where consent was the basis

To exercise any of these rights, please contact us at privacy@nepalotp.com. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us: