MultiOTP Privacy Policy

Effective September 4, 2026

This MultiOTP Privacy Policy explains how MultiTEL LLC ("MultiTEL," "we," "us," or "our") processes information when you use the MultiOTP mobile application and its system AutoFill extension (together, "MultiOTP"). It supplements the general MultiTEL Privacy Policy. The general Privacy Policy continues to apply to the underlying MultiTEL account, telephone-number, and messaging services.

1. What MultiOTP does

MultiOTP lets a person authorized by a MultiTEL account owner receive short-lived verification codes for selected SMS-enabled telephone numbers. The account owner chooses which numbers a paired device may use and can change or revoke that access. MultiOTP can display a code, send a notification, copy a code or assigned number at the user's request, and make an eligible code available to the operating system's AutoFill feature.

2. Information processed by MultiOTP

Depending on how the app is configured and used, MultiOTP processes:

• Provisioning and account-assignment data: the MultiOTP application identifier, a single-use pairing code or invitation link, the internal identifier of the authorizing MultiTEL account, and the telephone numbers and descriptions assigned to the paired device;
• Device and security data: device name, platform, a randomly issued device credential, push-notification token, pairing and revocation status, last-seen time, IP address, request information, and limited security, diagnostic, and audit records;
• Verification-code data: the extracted numeric verification code, the last four digits of the receiving telephone number, receipt and expiration times, a message identifier, and, when supplied in a supported message format, the website domain associated with the code; and
• Permission choices: whether notifications, camera access for QR scanning, and system AutoFill are enabled.

3. SMS content and short-lived codes

The complete SMS message is not delivered to MultiOTP. MultiTEL's messaging service processes the incoming SMS in order to identify an eligible numeric verification code and sends the app only the extracted code and limited delivery metadata described above. A code candidate is available to MultiOTP for approximately five minutes and is removed from the app's recent-code display after it expires.

The original SMS may remain available or be retained separately as part of the underlying MultiTEL messaging service according to the account's configuration, the general MultiTEL Privacy Policy, legal obligations, and applicable retention practices. Disconnecting MultiOTP does not itself delete records maintained by the underlying telephone-number or messaging service.

4. Camera, clipboard, notifications, and AutoFill

• Camera: camera frames used to scan a provisioning QR code are processed on the device. MultiOTP uses the decoded invitation value to request pairing and does not upload or retain the camera image.
• Clipboard: MultiOTP writes an assigned number or verification code to the clipboard only when the user taps the corresponding copy action. MultiOTP does not read unrelated clipboard contents.
• Notifications: if enabled, MultiOTP uses Apple Push Notification service or the applicable platform notification service to deliver a short-lived verification-code notification. The notification provider processes notification routing data under its own terms and privacy policy.
• AutoFill: if enabled, MultiOTP registers eligible, unexpired code identities with the operating system so the system can offer the matching code in a supported app or website. MultiOTP does not submit the form for the user.

5. How we use information

We use MultiOTP information to provision and authenticate devices; enforce the account owner's number assignments; deliver, display, copy, and AutoFill verification codes; route notifications; maintain service reliability; prevent fraud, abuse, and unauthorized access; troubleshoot problems; comply with law; and maintain security and audit records.

6. How we disclose information

We disclose MultiOTP information only as reasonably necessary to provide and secure the service, including to the authorizing account owner or administrator, notification and hosting providers, security and support vendors, carriers and messaging providers involved in the underlying service, and authorities or other parties when required or permitted by law. We do not sell MultiOTP personal information, use it for third-party targeted advertising, or track users across other companies' apps and websites for advertising.

7. Information MultiOTP does not request

MultiOTP does not request access to contacts, precise location, photos, microphone, advertising identifiers, payment-card information, or a password vault. The app does not require the paired person to know or enter the MultiTEL account owner's password.

8. Storage, retention, and security

The device credential is stored using the operating system's secure credential storage and remains until the device is disconnected, revoked, or otherwise invalidated. Push tokens and assignment records remain while reasonably necessary to operate the paired device and maintain security and audit records. Short-lived verification codes expire as described above. Other account, messaging, security, and legal records are retained as described in the general MultiTEL Privacy Policy.

MultiTEL uses reasonable administrative, technical, and physical safeguards designed to protect MultiOTP information, including encrypted network transport, scoped device credentials, restricted number assignments, revocation controls, and audit logging. No transmission or storage method is completely secure.

9. Your controls

You can deny or withdraw camera and notification permissions in device settings, disable MultiOTP in the operating system's AutoFill settings, disconnect the device from within the app, or ask the MultiTEL account owner to change number assignments or revoke the device. Some features will not work when the related permission is disabled.

10. Children

MultiOTP is not directed to children under 13. A responsible adult administering a family or organizational account must authorize device access and provide any consent required by law.

11. Changes and contact

We may update this Policy as MultiOTP changes. Material changes will be posted with a new effective date and additional notice where required. Questions or privacy requests may be sent to:

MultiTEL LLC
4103 Oak Tree Cir
Rochester, Michigan 48306, United States
Email: legal@multitel.net
Telephone: +1 888-686-8581