Privacy policy

This policy explains what [Company legal name] ("we") collects when you use imeifixer, why, and what you can do about it.

What we collect

• Account details: your email address and a hashed (not readable) version of your password. If you turn on two-factor sign-in, the secret for your authenticator app and your recovery codes are stored in protected form.
• Orders: the IMEI or serial numbers and any extra details you submit, the services you order, and the results.
• Wallet and payments: top-ups, charges and refunds on your balance, and the references our payment providers send us. Card and bank details are handled by the payment provider; we do not receive full card numbers.
• Security and usage data: IP addresses, browser type and sign-in times for your sessions, the server address bound to each API key, and records of API calls. We use these to keep accounts secure, to stop abuse and to answer support questions.
• Support: the messages you send in support tickets.

Why we use it

• To provide the service: run your account, place and deliver orders, and keep your balance.
• To keep the service secure and prevent fraud and misuse.
• To send emails you need, such as verification codes, password resets and messages about your orders, deposits and tickets.
• To meet legal, tax and accounting obligations.

[Owner: state the legal bases that apply to you, if your law requires them.]

Who we share it with

• Suppliers that carry out the checks and unlocks you order receive the IMEI or serial number and the details that service needs, but not your email address.
• Payment providers process your top-ups.
• Service providers that host the site or send email for us, only as needed to do that.
• Authorities, where the law requires it.

We do not sell your personal data.

[Owner: list your hosting, email and payment providers and where they process data.]

Cookies

We use only cookies the site needs to work: one that keeps you signed in, a short-lived one used during sign-in, and, if you choose to trust a device for two-factor sign-in, one that remembers that choice. We do not use advertising or analytics cookies. If a bot-protection check is shown at sign-in or registration, its provider may process technical data about your browser to tell people from bots.

How long we keep it

We keep account data while your account is open. Order and wallet records are kept for as long as accounting and tax rules require, even after an account is closed. Security logs are kept for a limited time. [Owner: add your retention periods.]

Your choices and rights

You can see your orders, wallet history, sessions and API keys in your account, and sign out other sessions at any time. Depending on where you live, you may also have the right to ask for a copy of your data, to have it corrected or deleted, or to object to some uses. Contact us to make a request; we may need to confirm it is you. Some records, such as wallet transactions, may have to be kept to meet legal obligations.

Security

Passwords are stored hashed, the site is served over HTTPS, and you can turn on two-factor sign-in. No system is perfectly secure, so please use a unique password and keep your API keys private.

Changes and contact

We will update the "Last updated" date when this policy changes. Questions or requests: [contact email], or see the contact page.