Privacy Policy
Last updated: May 15, 2026
PWF Platform ("we", "our", "us") operates the PWF Platform service for WhatsApp number validation and filtering. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Username
- Password (stored as a bcrypt hash — never in plain text)
- Email address (optional, for recovery and notifications)
- Telegram ID (optional, for two-factor authentication)
1.2 Phone Number Data
Our service processes phone numbers submitted by users for validation purposes. By using the platform you confirm that:
- You have the legal right or consent to process the numbers submitted
- The numbers are used for legitimate business purposes (marketing, CRM, data quality)
- You comply with applicable data protection regulations in your jurisdiction
1.3 Transaction Data
- Balance top-ups and payment method used
- Order details, quantities and costs
- Shop and reseller purchase records
2. How We Use Your Information
- Service Delivery: to process number-validation orders, deliver results, and manage your account
- Security: to protect accounts via 2FA, login monitoring and fraud prevention
- Communication: to send order notifications, security alerts and important service updates
- Improvement: to fix bugs, measure performance and develop new features
- Legal Compliance: to comply with applicable laws, tax obligations and lawful requests
3. Cookies & Tracking
We use a small number of cookies. Some are strictly necessary for the site to function, while others are only set if you give consent.
Essential cookies
PHPSESSID— keeps you signed in for the duration of your sessionws_lang— remembers your preferred languagecookie_consent— remembers whether you accepted the cookie banner
Analytics cookies (with consent)
Used only if you click "Accept all" on the cookie banner. They help us understand which pages are most useful and where users get stuck. You can withdraw consent at any time by clearing your cookies.
You can block or delete cookies via your browser settings. Blocking essential cookies will prevent the site from functioning correctly.
4. Data Retention
- Account data: retained until you request deletion
- Order results: stored for 30 days after completion, then automatically purged
- Phone number data: cached only for the time required to process an order, then deleted
- Login & security history: last 50 login records retained for security investigations
- Transaction records: retained for the period required by applicable accounting and tax law
5. Data Sharing
We do not sell, rent or trade your personal information. We only share data when one of the following applies:
- When required by law, legal process or a lawful governmental request
- To protect the rights, property or safety of our users or the public
- With trusted service providers (hosting, payment processing) bound by confidentiality and data-protection agreements
6. Data Security
We apply industry-standard safeguards, including:
- HTTPS/TLS encryption for all data in transit
- Bcrypt password hashing with per-user salting
- Optional two-factor authentication via Telegram
- Session management, CSRF protection and login monitoring
- Regular security reviews and dependency updates
7. Your Rights (GDPR)
If you reside in the European Economic Area, the UK or another jurisdiction with similar protections, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: request deletion of your account and associated data
- Portability: receive your data in a machine-readable format
- Restriction: ask us to limit how we process your data
- Objection: object to specific processing activities, including marketing
To exercise any of these rights, contact us using the channels listed in section 12. We will respond within 30 days.
8. Account Deletion
You can request complete account deletion through:
- Your account settings on the platform
- Contacting our support team via the channels in section 12
Once deletion is confirmed, we permanently remove your account, order history and any cached phone-number data within 30 days. Transaction records may be retained for the period required by accounting and tax law.
9. Children's Privacy
Our service is not directed at users under the age of 18 and we do not knowingly collect personal data from minors. If you believe a minor has provided personal data, please contact us and we will delete it.
10. International Data Transfers
Your data may be processed on servers located in different jurisdictions. Where data leaves the European Economic Area, we apply appropriate safeguards such as Standard Contractual Clauses to ensure an equivalent level of protection.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be highlighted on this page with a new "Last updated" date. Continued use of the platform after an update constitutes acceptance of the revised policy.