Privacy Policy

Last updated: 19 October 2026

This policy explains what personal data Emmy SMS ("we", "us") collects when you use emmysms.com, why, who we share it with and your rights under the Nigeria Data Protection Act 2023 (NDPA). Emmy SMS is the data controller for this data.

1. What we collect

• Account details: your name, email address, optional phone number, password (stored only in encrypted, hashed form) and, if you turn it on, your two-factor authentication setup.
• Wallet and order details: wallet top-ups, purchases, refunds and referral rewards, and the information you enter to complete an order — for example the phone, meter or smart-card number for a bill, or the profile or post link for a social media order. Numbers you rent, codes you receive and account details you buy are saved in your History so you can find them again.
• Payment details: the amount, reference and status of your payments. Card and bank details are entered directly with our payment partner; we never see or store your full card number or PIN.
• Support messages: what you send us in support tickets or on WhatsApp.
• Technical data: IP address, device and browser type, and security logs (such as sign-ins) that keep the service safe.
• Live visit data: while you have the site open, a random code for your browser tab, the page you are on and whether you are signed in are shared in real time so our team can see how many people are online. This does not include your name, email or account ID and is not stored once you leave.

2. Why we use it, and our legal basis

• To provide the service you ask for — create your account, fund your wallet, deliver orders, process refunds and give support (performance of our contract with you).
• To keep Emmy SMS and our users safe — prevent fraud, abuse and chargebacks, secure accounts and improve reliability (our legitimate interests).
• To meet legal duties — keep accounting and transaction records and respond to lawful requests from authorities (legal obligation).
• To send optional updates or offers — only if you agree, and you can opt out at any time (consent).

We do not sell your personal data, and we do not use it for automated decisions that have legal effects on you.

3. Who we share it with

Only what is needed, with:

• Our payment partner, to process wallet top-ups.
• Service suppliers that fulfil your orders — for example a phone number for airtime, a meter number for electricity, or a link for a social media order. Number and account suppliers do not receive your name or email.
• Hosting and infrastructure providers that store our database and run the website for us, under contracts that require them to protect your data.
• Authorities, where Nigerian law requires it or to prevent fraud or harm.

4. Data stored outside Nigeria

Our database, website hosting and some suppliers are located outside Nigeria (for example in the European Union and the United States). When data is transferred abroad we rely on providers that offer adequate protection and on safeguards permitted under the NDPA.

5. Cookies and local storage

We use essential cookies to keep you signed in and secure your session, and your browser's local storage for preferences such as dark mode, whether your balance is hidden and your recently used numbers. We do not use advertising or cross-site tracking cookies.

6. How long we keep it

• Account details: while your account is open, and for a limited period after closure to handle disputes.
• Transaction records: for as long as accounting, tax and anti-fraud laws require (generally up to 6 years).
• Support messages and security logs: only as long as needed for the purpose they were collected for.

7. How we protect it

We use encrypted connections (HTTPS), hashed passwords, optional two-factor authentication, access controls that limit who can see your data, and server-side checks so that only you (and authorised staff, for support) can see your transactions. If a data breach puts your rights at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.

8. Your rights

Under the NDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data, where we are not required to keep it by law;
• restrict or object to how we use it, including for marketing;
• give you your data in a commonly used format to move it elsewhere;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, open a support ticket. We will respond within 30 days. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).

9. Children

Emmy SMS is only for people aged 18 and over. We do not knowingly collect data from children; if we learn we have, we will delete it.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will tell you about significant changes on the site or by email.

11. Contact

For privacy questions or requests, open a ticket from Help & Support in your dashboard or message us on WhatsApp. See also our Terms of Service.