Privacy policy
This page explains what data Armor Legacy has about you, why, how long it is kept and who else sees it. We don't sell data, don't show ads and don't use analytics or trackers. The site sets only two cookies: your sign-in and, if you pick one, your language.
Effective 30 October 2026.
Who is responsible
Armor Legacy (legacy.armor.tel) sells phone numbers and calls to ordinary phones for use in the Armor app and other SIP apps. It is provided by Roman Erin, autónomo, Spain, who is the controller of your data under the EU General Data Protection Regulation (GDPR). For any question about your data, write to ops@armor.tel.
Armor Legacy is a service separate from Armor: it has its own database. Armor's own policy is at armor.tel/en/privacy.
What we keep
Your account. The phone number you confirmed through Persona when signing in, the other numbers armor.tel knows you confirmed (to suggest them as your caller ID), the caller ID you chose, your SIP login and password (the password encrypted), and the sign-ins of your Armor apps.
Numbers. The numbers you bought, their price, paid period and state, kept also after a number is released or an order fails. Own numbers you verified with a code, until you remove them, and when you asked for codes (for the limits).
Addresses. The name and address you give when buying a number go to our telephone carrier as an address record; we keep the carrier's reference. The 911 address of a US, Canadian, Puerto Rican or US Virgin Islands number is kept here too, while 911 is on for it.
Documents and details for a country's rules. Some countries give a number only with documents (proof of address, an ID, a registration form) and details such as an ID number or a date of birth. We pass them to our telephone carrier for the country's regulatory check and keep no copy: files are never saved on our side, and the details are not stored. We keep only the carrier's reference numbers for the documents and the group they were sent in, the review status, and, if the check fails, the carrier's explanation, until the number goes live or the order ends.
Money. Your balance and every top-up, charge and refund. For top-ups we keep the payment's Stripe references and amount; card details are entered at Stripe and never reach us.
Calls. For each call: the numbers, times, duration and what it cost, from our carrier's call records. Calls are not recorded.
SMS. For each message: the numbers, time, parts and cost. The text of a message you send is not kept. The text of a message you receive is kept only until it is handed to your Armor apps, at most 3 days.
Server logs contain IP addresses, the pages requested and account and number identifiers. They are needed to find failures and abuse.
How long data is kept
| Data | Period |
|---|---|
| Sign-in on the site | 7 days |
| Sign-in in progress | 30 minutes |
| Search results with prices | 30 minutes |
| Text of a received SMS | until delivered to your apps, at most 3 days |
| Carrier's explanation of a failed document check | until the number goes live or the order ends |
| Own number verified with a code | until you remove it |
| 911 address | while 911 is on for the number |
| Balance, top-ups, charges, refunds | as long as Spanish tax and accounting law requires |
| Account, numbers, call and SMS records, document references | while you use Armor Legacy or until you ask us to delete them, except what the law requires us to keep |
| Server logs | 30 days |
Who else sees data
- Our telephone carrier, Telnyx LLC, USA, connects calls and SMS and provides the numbers. It receives the numbers, calls and SMS (including their text), your name and address, your account phone, and the documents and details a country requires, which it keeps for the regulatory check under its own terms.
- Persona and the messenger you confirm your phone with (Telegram, MAX or WhatsApp) see your number during sign-in.
- Armor (armor.tel, same controller) receives your sign-in phone and your numbers to put them in Armor's number directory, and the SMS you receive to deliver them to your Armor apps.
- Stripe takes top-up payments.
- Hetzner (servers in Finland) hosts the service. Cloudflare runs DNS for the armor.tel domain.
Processors act on our behalf under their data processing agreements; transfers to the USA rely on the EU Standard Contractual Clauses. We don't share data with anyone else unless the law requires it.
Legal basis
Most data is processed to provide the service you chose: selling and running numbers, connecting calls and SMS, keeping your balance. Documents and details for a country's rules, 911 addresses and payment records are processed because the law requires them. Server logs and limits rely on the service's legitimate interest in its security.
Your rights
You can find out what data we have about you, get a copy, correct it, delete it, restrict its processing or object to it. Write to ops@armor.tel from or about the phone you sign in with; we will ask you to confirm it is yours and reply within a month. Releasing a number or removing an own number you can do yourself in the cabinet.
If you think we are violating your rights, you can complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority of your country.
Children
Armor Legacy is not intended for children under 14.
Changes
If these rules change, we will update this page and the date at the top.