# Privacy Policy

> What fones keeps about you and your phones, why, for how long, and who processes it.

Source: https://fones.ai/privacy. Last updated: October 22, 2026

This policy explains what fones ("we") keeps when you use the site, the console, the API and the MCP server, and why.

## What we keep

- **Account.** Your email address, and the sign-in sessions of the console.
- **API keys.** A fingerprint (SHA-256) of each key, its name, scopes and last use. We never keep the key itself.
- **Billing.** Your balance, top-ups and charges. Card details stay with our payment processor; we never see them.
- **Phones.** What you bought, its status, number and IP, and the activity log: each action sent to a phone (which key, what, the result, when), kept 30 days.
- **Texts.** SMS that reach your numbers, kept 30 days so `read_sms` and the console can show them.
- **Webhook.** Your endpoint URL and the recent delivery attempts.
- **Logs.** Request logs (IP address, path, status, time) for security and debugging, kept up to 30 days.

We do not keep screenshots after we send them to you, and we do not record the phone's screen.

## What is on your phones

The apps, accounts and files on your phones are yours. We access them only to run the service, to help when you ask, or to investigate abuse. When a phone ends, it is wiped before anyone else uses it.

## Why

To run the service you asked for (the contract), to bill it, to keep it secure and to stop abuse (our legitimate interest), and to meet legal duties such as tax records.

## Who processes it

- Cloudflare (hosting, database, email), worldwide.
- Our phone, number and IP providers, for the phones, numbers and addresses you buy.
- Our payment processor, for top-ups.

We do not sell your data and do not use it for advertising. We share it with authorities only when the law requires.

## Cookies

The console uses one cookie to keep you signed in. The site sets no tracking cookies. The theme you pick is kept in your browser's local storage.

## Your rights

You can ask for a copy of your data, its correction or its deletion, and you can close your account at any time. Write to support@fones.ai. Records we must keep by law (for example invoices) stay for the time the law sets.

## Changes

We may update this policy; the date at the top changes when we do. Questions: support@fones.ai.