Last updated: July 4, 2026
This Policy describes how Ghostsim (the "controller") collects and processes personal data in the use of the ghostsim.net platform, in compliance with Brazilian Law No. 13.709/2018 (LGPD).
1. Data we collect
We collect: (a) registration data (name and e-mail); (b) usage data (number orders, balance transactions, Pix payment history); (c) technical data (IP address, access logs, used for security and abuse prevention). We do not collect SMS content beyond what is strictly necessary to display the code to you.
2. Purposes and legal basis
We process data to: perform the contract (provide the Service and process payments), comply with legal obligations, and pursue our legitimate interest in fraud prevention and platform security. Your e-mail is also used for transactional communications (verification, receipts, notices).
3. Sharing
We share data only with processors necessary to provide the Service: the number supplier (5sim), the payment processor (PushinPay) and the e-mail provider (Resend). We do not sell your data. We may disclose data under legal order.
4. Retention
We keep data for as long as necessary for the purposes above. Financial transaction records are retained for the period required by applicable tax and fraud-prevention law; other data is deleted or anonymized once no longer needed — deleting your account removes your personal data, orders and history.
5. Your rights
You may request confirmation, access, correction, anonymization, portability or deletion of your data, and withdraw consent, under the LGPD. Full account deletion is available in My account; other requests via the Support page.
6. Security and contact
We adopt technical and organizational measures to protect your data (hashed passwords, access control, rate limiting). No system is 100% secure; we will report relevant incidents as required by law. Questions about this Policy and privacy matters: via the Support page.