Legal · Your data, protected

Privacy Policy

How we collect, use, and protect your data

Last updated 24 Oct 2026

This Privacy Policy explains how OTPly ("we", "us", "our"), operated by Adept Code, collects, uses, and protects information when you use our website, dashboard, and API (together, the "Service"). By using the Service, you agree to the practices described below.

1. Information we collect

Account information — name, email address, mobile number, and password (stored as a secure hash, never in plain text).

API usage data — your API key, the app name you configure, and logs of OTP requests including the destination mobile number, timestamp, delivery status, and credits deducted per request.

Payment information — when you purchase credits, payment is processed by our payment partner, Cashfree. We store the order ID, payment status, and amount — we do not store your card, UPI, or bank details; those are handled entirely by Cashfree.

Technical data — IP address, browser/device information, and login timestamps, collected automatically for security and troubleshooting.

2. How we use your information

  • To create and manage your account, and authenticate your login.
  • To process and deliver OTP requests made through your API key.
  • To process credit purchases and maintain accurate billing records.
  • To provide customer support, including through our AI-assisted and human support chat.
  • To detect fraud, abuse, or violations of our Terms & Conditions.
  • To send important service updates (e.g. maintenance notices, policy changes).

3. How we share your information

We do not sell your personal information. We share data only with:

  • Cashfree — to process credit/card/UPI payments.
  • SMS/WhatsApp delivery partners — to route the OTPs you request to end recipients.
  • Law enforcement or regulators — only when legally required to do so.

4. Data retention

We retain account and OTP log data for as long as your account is active, and for a reasonable period afterward to comply with accounting, security, and legal obligations. You may request deletion of your account and associated personal data, subject to any records we're legally required to keep.

5. Data security

Passwords are stored using industry-standard hashing. API keys are unique per account and can be regenerated any time from your dashboard if compromised. We use HTTPS across the Service with standard security headers against common web attacks.

6. Your rights

You can access, update, or correct your account details at any time from your profile page. You may request a copy of your data or ask us to delete your account by contacting support through the dashboard.

7. Cookies

We use essential cookies to keep you logged in securely (session cookies). We do not use third-party advertising or tracking cookies.

8. Children's privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal information from minors.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact us

For any privacy-related questions or requests, please reach out via the support option in your dashboard.

Ready to send OTPs via WhatsApp?

No DLT registration. No BSP setup. No monthly fees.

Start Free — 250 Credits