隐私政策

01适用范围与联系

本政策适用于 www.y3v.net 的 Y3V 验证码平台、客户控制台及相关 API。Y3V 提供短信、语音、邮件和 WhatsApp 验证能力；具体可用渠道与地区以控制台为准。

有关本政策、个人信息访问、更正、导出、删除或投诉，请联系 admin@y3v.net。该邮箱由 Y3V 管理，并转发至运营者的 Gmail 邮箱处理请求。

02我们处理哪些数据

账户数据：注册邮箱、显示名称、邮箱验证状态、账户标识与登录方式。邮箱密码注册时保存密码的单向哈希，不保存明文密码。

身份与安全数据：登录会话、会话有效期、设备或浏览器信息、登录 IP 地址，以及用于安全检查的请求标识、访问时间和审计记录。部分限流标识采用带密钥的哈希处理。

验证业务数据：你提交的接收手机号或邮箱、所选渠道、语言和国家、验证及发送状态、上游请求标识、请求时间与计费记录。Y3V 不在自身业务数据库保存验证码明文；验证码的生成和校验由 Twilio Verify 管理。

账务数据：可用及冻结余额、账本、充值金额、币种和网络、支付订单编号、支付地址、必要的 Memo / Tag、支付状态及人工核对信息。Y3V 不要求或保存你的钱包私钥、助记词。你与我们联系时，我们还会处理你主动提供的支持信息。

03Google 登录数据与使用限制

选择 Google 登录时，Y3V 仅申请 openid、userinfo.email 和 userinfo.profile 基本身份权限。我们会获得 Google 账户标识、姓名、邮箱、头像地址和邮箱验证信息，并可能保存该登录流程返回的访问令牌、ID 令牌、刷新令牌及其有效期，以完成身份认证和会话管理。我们不借此读取 Gmail 邮件、Google Drive 文件或通讯录。

这些 Google 用户数据仅用于登录、创建和识别你的 Y3V 账户、显示账户资料、维护会话及保障账户安全。我们不会出售 Google 用户数据，不将其用于广告画像，也不用于训练通用人工智能或机器学习模型。

Y3V 对从 Google API 接收的信息的使用和传输遵循 Google API 服务用户数据政策，包括其中的限制使用要求。相关数据的人工访问限于获得你明确同意的支持处理、必要的安全调查、遵守适用法律，或该政策允许的其他有限情况。

你可在 Google 账户的第三方连接设置中撤销 Y3V 的访问权限。撤销授权会阻止相应的后续访问，但不会自动关闭 Y3V 账户或删除既有账务记录；如需删除或导出账户数据，请另行联系我们。

Google API 服务用户数据政策 ↗ · 管理 Google 授权 ↗

04我们如何使用数据

我们为提供账户认证、处理你授权的验证码请求、校验验证码、计算费用、处理充值与对账、回应支持请求，以及预防滥用、欺诈和安全事件而处理数据。

在适用法律要求区分处理依据的情况下，我们根据提供所请求服务的需要、你作出的授权或同意、运营和保护服务的正当需要，以及适用的法律义务处理相关信息。我们不会以本政策为由擅自发送营销验证码。

05数据共享与服务商

Cloudflare 托管网站、API、数据库及安全基础设施，并提供平台账户通知邮件。Google 为自愿选择 Google 登录的用户提供身份认证。外部 Google Fonts 字体请求也可能向 Google 传送 IP 地址与浏览器请求信息。

启用并使用验证渠道时，相关接收手机号或邮箱、渠道和语言等完成请求所需的信息会发送给 Twilio Verify；邮件渠道还可能由其 SendGrid 集成处理，WhatsApp 渠道会经相应消息网络投递。这些收件信息不等同于你用于 Google 登录的账户资料。

选择加密货币充值时，NOWPayments 会处理订单标识、金额、币种、支付地址和状态。区块链上的地址、交易和金额可能是公开的，无法通过删除 Y3V 账户从区块链上移除。

我们仅在提供服务、处理你请求的支持、必要安全保护、遵守适用法律或经你授权的范围内共享数据。我们不会把 Google 登录资料作为验证码商品出售，也不会为了广告目的出售或共享这些资料。

06存储、保留与删除

账户、身份关联、业务及账务数据主要存放于 Cloudflare 提供的基础设施。Google、Twilio、SendGrid、WhatsApp 相关服务及 NOWPayments 可能在各自运营地区处理数据；因此数据可能跨地区传输。

我们在提供账户与服务、处理待结算事项、保护安全或履行适用法律义务所需的期间保留相关数据。不同类别的保留时间可能不同；我们目前不承诺所有记录在同一固定期限自动删除。

你可以通过联系邮箱申请访问、更正、导出或删除数据。我们会先核实请求人的身份，随后根据请求与适用要求删除或去标识化相应个人信息，并处理不再需要的认证资料。必要的交易、不可变账本、争议与安全记录可能继续保留，并限制使用。第三方自身依法保留的数据和公开区块链记录不由 Y3V 单方面控制。

07安全措施与访问限制

我们使用 HTTPS 传输、访问权限控制、密码与 API 密钥哈希、会话验证以及安全和账务审计等措施保护数据。能够处理个人数据的人员和服务商应限于完成相关任务所必需的范围。

请妥善保存账户密码和 API 密钥，仅从可信的服务端使用密钥，并在怀疑泄露时及时撤销。任何网络或存储系统都无法保证绝对安全。

08Cookie、本地存储与外部链接

登录所需的 Cookie 用于保存和验证会话、保护认证流程。本地存储用于记住语言偏好。禁用这些存储功能可能影响登录或偏好设置。Y3V 当前未配置广告追踪或基于 Google 登录资料的广告系统。

网站可能链接到 Google、Twilio、Cloudflare、NOWPayments 或其他外部服务。其独立网站和处理活动受相应提供者的隐私政策约束。

09客户提交的收件信息

如果你代表自己的产品或组织提交他人的手机号或邮箱，你应具有适当的授权及合法处理依据，向收件人说明验证码用途，并遵守适用的隐私和通信规则。Y3V 按你的验证请求处理这些信息；本政策并不替代你向自身用户作出的隐私说明。

10政策变更

本政策的生效及更新日期见页面顶部。我们会在此公布修改；涉及 Google 用户数据使用方式等重大变化时，会通过适当的站内或邮件方式告知，并在需要时重新取得授权。有关权利及本政策的疑问，请联系 admin@y3v.net。

01Scope and contact

This policy applies to the Y3V verification platform at www.y3v.net, its customer console and related APIs. Y3V offers SMS, voice, email and WhatsApp verification; availability depends on the products and destinations enabled in the console.

For privacy questions, complaints, or requests to access, correct, export or delete personal information, contact admin@y3v.net. Y3V manages this address and forwards messages to the operator’s Gmail inbox for handling.

02Information we process

Account information includes your registration email, display name, email-verification status, account identifiers and sign-in method. Password registration stores a one-way password hash, not the plaintext password.

Authentication and security information includes sessions, expiry times, device or browser information, sign-in IP addresses, request identifiers, timestamps and audit records. Some rate-limiting identifiers are processed using keyed hashes.

Verification information includes the recipient phone number or email you submit, channel, language, destination country, verification and delivery status, provider identifiers, timestamps and charges. Y3V does not store plaintext one-time verification codes in its own business database; Twilio Verify manages code generation and validation.

Billing information includes available and reserved credit, ledger entries, deposit amounts, currencies and networks, payment identifiers, addresses, required memos or tags, payment status and reconciliation details. Y3V does not request or store wallet private keys or recovery phrases. We also process information you voluntarily provide when requesting support.

03Google sign-in and use restrictions

If you choose Google sign-in, Y3V requests only the basic openid, userinfo.email and userinfo.profile permissions. We receive your Google account identifier, name, email, profile-picture URL and email-verification information. We may also store access tokens, ID tokens, refresh tokens and expiry information returned during authentication to complete sign-in and manage sessions. These permissions do not give Y3V access to Gmail messages, Drive files or contacts.

We use this Google user data only to authenticate you, create and identify your Y3V account, display account details, maintain sessions and protect account security. We do not sell Google user data, use it for advertising profiles, or use it to train general-purpose artificial-intelligence or machine-learning models.

Y3V’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Human access is limited to support you expressly authorize, necessary security investigations, compliance with applicable law, or other limited circumstances permitted by that policy.

You can revoke Y3V access in your Google Account third-party connections settings. Revocation prevents subsequent access under that authorization, but does not automatically close your Y3V account or remove existing billing records. Contact us separately for deletion or export requests.

Google API Services User Data Policy ↗ · Manage Google connections ↗

04How we use information

We process information to authenticate accounts, fulfill verification requests you authorize, check codes, calculate charges, process deposits and reconciliation, answer support requests and prevent abuse, fraud and security incidents.

Where applicable law requires a processing basis, we rely on providing the requested service, your authorization or consent, legitimate operational and security needs, and applicable legal obligations. This policy does not authorize us to send marketing verification messages.

05Sharing and service providers

Cloudflare hosts the website, APIs, database and security infrastructure and sends platform account notifications. Google authenticates users who voluntarily choose Google sign-in. Requests for externally hosted Google Fonts may also convey IP addresses and browser request information to Google.

When an enabled verification channel is used, Twilio Verify receives the recipient phone number or email, channel, language and other information needed for that request. Email may be processed through its SendGrid integration and WhatsApp delivery through the relevant messaging network. These recipient details are distinct from the account information used for Google sign-in.

For cryptocurrency deposits, NOWPayments processes order identifiers, amounts, currencies, payment addresses and status. Blockchain addresses, transactions and amounts may be public and cannot be removed from the blockchain by deleting a Y3V account.

We share information only as needed to provide services, handle support you request, protect security, comply with applicable law or fulfill your authorization. We do not sell Google sign-in information as a verification product or sell or share it for advertising.

06Storage, retention and deletion

Account, identity-linking, business and billing data is primarily stored on infrastructure provided by Cloudflare. Google, Twilio, SendGrid, WhatsApp-related services and NOWPayments may process data in their operating regions, so information may cross regional borders.

We retain information as needed to provide your account and services, settle outstanding matters, protect security or meet applicable legal obligations. Retention varies by category; we do not currently promise automatic deletion of every record after a single fixed period.

Contact us to request access, correction, export or deletion. After verifying your identity, we will address the request and applicable requirements by deleting or de-identifying appropriate personal information and handling authentication data no longer needed. Necessary transaction, immutable-ledger, dispute and security records may be retained with restricted use. Y3V cannot unilaterally delete public blockchain records or information a third party independently retains under its obligations.

07Security and access controls

We use HTTPS, access controls, password and API-key hashing, session verification, and security and billing audits. Access by people and providers should be limited to what is necessary for their tasks.

Keep account credentials and API keys secure, use keys only on trusted servers, and revoke keys if you suspect exposure. No network or storage system can guarantee absolute security.

08Cookies, local storage and external links

Essential cookies maintain and validate sessions and protect authentication flows. Local storage remembers language preferences. Blocking these functions may affect sign-in or preferences. Y3V does not currently configure advertising trackers or advertising based on Google sign-in data.

Links may lead to Google, Twilio, Cloudflare, NOWPayments or other external services. Their independent sites and processing activities are governed by their own privacy policies.

09Recipient information submitted by customers

If you submit another person’s phone number or email on behalf of your product or organization, you must have appropriate authority and a lawful basis, explain the verification purpose to recipients and comply with applicable privacy and communications rules. Y3V processes this information for your verification requests; this policy does not replace your own disclosures to your users.

10Policy updates

The effective and last-updated date appears at the top of this page. Changes will be published here. Material changes, including changes to our use of Google user data, will be communicated through an appropriate in-product or email notice, and renewed authorization will be obtained where required. Contact admin@y3v.net with questions or rights requests.