Privacy Policy

SMS Activate (the “App”) and the website esim.chatkit.cc (the “Site”) are operated by Montigate LLC (“we”, “us”, “our”), a company registered in England and Wales. We act as the data controller for the personal data described in this policy. You can reach us at info@chatkit.cc.

The App provides temporary virtual phone numbers that can receive SMS verification codes, so you can sign up for online services without sharing your personal phone number.

• Account data. An anonymous account identifier created when you first open the App, and your email address if you choose to provide it.
• Purchase data. Records of credit packs you buy. Payment itself is processed by Apple App Store or Google Play — we never see your card details.
• Activation data. The service, country, virtual number and the text of verification SMS messages received on that number, kept for the time needed to deliver the code to you and to resolve disputes.
• Device and usage data. Device model, operating system version, app version, language and crash or diagnostic logs.
• Support data. When you contact support we collect the content of your message and any contact details you give us. Live chat on the Site runs on Chatwoot, which we host ourselves at chat.holylabs.net; it stores the conversation and an identifier in your browser so the thread survives a page reload. Email support is handled through our email tooling. Both are used only to answer you.

• To provide virtual numbers and deliver verification codes to you (performance of a contract).
• To maintain your credit balance and restore purchases across devices (performance of a contract).
• To answer support requests (legitimate interests / performance of a contract).
• To detect and prevent fraud, abuse and violations of our Terms of Service (legitimate interests).
• To fix bugs and improve the App using aggregated diagnostics (legitimate interests).

We do not sell your personal data. With your consent, we use analytics and advertising cookies on the Site — see section 5a.

Strictly necessary cookies keep the Site working and are always set. Beyond those, the Site can load two third-party tools, and neither runs until you accept them in the cookie banner:

• Google Tag Manager. Loads our measurement tags. Google receives your IP address, the pages you view and general device information.
• Meta Pixel. Measures the performance of our advertising and lets us reach similar audiences. Meta receives your IP address, the pages you view and, where you have a Meta account, may link that activity to it.

Declining means neither tool loads at all. You can change your mind by clearing this site’s data in your browser, which brings the banner back. Our legal basis for both is your consent, and you can withdraw it at any time without affecting the Site’s core functionality.

We share data only with service providers who process it on our behalf: cloud hosting and database providers, telephony providers that supply the virtual numbers, Apple and Google for in-app purchases, email delivery tooling for support correspondence, and — only where you have consented — Google and Meta for the analytics and advertising tools described in section 5a. Each processor is bound by a data processing agreement. We may also disclose data where required by law.

Some providers are located outside the United Kingdom. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions or standard contractual clauses to protect it.

Activation data, including received SMS text, is kept only as long as needed to operate the service and handle disputes, then deleted or anonymised. Account and purchase records are kept while your account is active and for the period required by tax and accounting law. Support correspondence is kept for up to 24 months after the request is closed.

Under the UK GDPR and the EU GDPR you have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, email info@chatkit.cc. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

You can delete your account directly in the App (Settings → Delete account) or by emailing us. Deletion removes your account identifier, activation history and any stored email address, except for records we must keep by law.

The App is not directed at children and is intended for users aged 18 or over. We do not knowingly collect data from children; if you believe a child has used the App, contact us and we will delete the data.

Data is encrypted in transit, access is restricted to personnel who need it, and our databases enforce row-level access controls. No system is perfectly secure, so we also keep the amount of data we hold to a minimum.

We may update this policy from time to time. Material changes will be announced in the App or on the Site, and the “Last updated” date above always reflects the current version.