This policy applies to the YUNMA website and related services. By using the Platform you agree to the handling described here. We follow the principle of minimal necessity and collect only what the service requires.
1. Information we collect
- Account data: email address, password hash (never plaintext), display name, role and registration time.
- Transaction data: top-up records, orders, purchased service and country, amounts, refunds and wallet transactions.
- Verification messages: SMS content (including codes), sender and receipt time, shown to you on the order page.
- Top-up proofs: USDT order ID, amount, on-chain transaction hash (TxID) and crediting status.
- Technical data: necessary request logs (API errors, risk events and source IP) for security and troubleshooting.
We do not collect third-party account passwords and do not ask for ID documents or similar sensitive data.
2. How we use information
- Create and manage accounts, authenticate sign-ins and maintain sessions.
- Process top-ups, orders, refunds and gift-card redemptions.
- Show the number, countdown and verification messages on the order page in real time.
- Risk control and security, including detecting unusual sign-ins, rate limiting, anti-abuse and fraud prevention.
- Support, dispute handling and compliance obligations required by law.
5. Storage & security
- Passwords are stored as scrypt hashes and cannot be recovered in plaintext.
- Only session-token hashes are stored and transmitted via HttpOnly cookies to reduce exposure.
- Data lives on access-controlled servers with backups, rate limiting and origin checks against unauthorised access.
- We retain information only as long as needed for the service; after account deletion we remove or anonymise it, except where law requires retention.
Despite our efforts, no internet environment is absolutely secure. Keep your account and password safe.
6. Your rights
- View and change your display name and password in your account.
- View your orders, messages and transactions on the order and wallet pages.
- Request account deletion; account, balance and order history cannot be restored afterwards.
- Contact support to access, correct or delete other information; we will respond within a reasonable period.
7. Minors
The Platform is intended only for adults with full legal capacity. Minors may not register or use the service. If we discover use by a minor, we will restrict the account and work with the guardian.
8. Updates & contact
We may update this policy as our business or regulations change, and will publish the effective date on this page. Continued use after an update means you accept the revised policy.
For questions or to exercise your data rights, contact:
- Email: support@r2sms.dev