Every Cleat line belongs to a real, verified person. Here's why.

How verification works

1. 01You verify before a line will show you a text, from your account. Buy whenever you like; the texts wait. You only verify once.
2. 02We check a government ID and a selfie. It takes about two minutes.
3. 03Prefer not to take a selfie? Choose the ID-only option. We check the document. A person at Cleat reviews the result before your texts unlock. Every decision is recorded with a reason, and we email you the outcome.
4. 04Subscribe whenever suits you, before or after the check. The number is live right away, and its texts unlock once you're verified. If your ID doesn't pass before the line first renews, that first payment is refunded in full.

What we keep, and what we don't

Your ID document and selfie go to our identity verification provider, which checks them. We receive the outcome and a reference to the check, not copies of your ID or selfie. A person reviewing an ID-only check reads the provider's result live: document type, issuing country, expiry date. Cleat doesn't store ID images.

That provider works for Cleat as a service provider and is named in our Privacy Policy. What Cleat collects, and how long we keep it, is in our Privacy Policy.

What we refuse

Cleat is a line for your own accounts and your team's. Our Terms rule out using it to:

• break the law, or help someone else do so;
• commit fraud, misuse someone's identity, or impersonate a person or business;
• receive texts meant for someone else without their permission;
• get around a sanctions rule or a lawful investigation;
• resell lines or access without our written permission.

We may suspend or close accounts that do. Verifying on someone else's behalf isn't allowed either. We can refuse, pause or remove access to lines when a check fails, looks fraudulent, or was done for someone else.

What a Cleat line is, and isn't

• A real US mobile number that receives texts, and transcripts of incoming calls. Not VoIP and not a virtual number. How that's different.
• Cleat Line is receive-only: no outbound calls or texts, and no 911. An incoming call reaches you afterwards, transcribed, never as a ringing phone. Cleat Full adds calls in the web app.
• Assigned from available US inventory. You can't choose the area code.
• Yours while you subscribe. When billing ends, the number is held for 30 days, then released, and it may later be given to someone else.
• Not a guarantee. Most services that turn away VoIP accept a real mobile line, but no provider can promise that every service accepts every number.

Security basics

Only what Cleat does today:

• Connections are encrypted, and browsers are told to use HTTPS only.
• Passwords are stored as one-way hashes. Changing yours signs you out everywhere else.
• API keys are shown once, stored only as hashes, and can be revoked. Webhook signing secrets are shown once too.
• Webhooks are signed with a timestamp. Your endpoint can check that a delivery came from Cleat and isn't a replay.
• Texts are visible only to members of the workspace that owns the line. Remove a teammate and they stop seeing texts immediately.
• Sign-in attempts and API requests are rate limited.
• We don't sell your data. Ad measurement with Meta runs in Europe only if you accept it, and never when your browser sends Global Privacy Control or Do Not Track.

Who runs Cleat

Cleat is operated by Hyppe Tech LLC, a US company. Write to us at contact@cleat.so.

Keep reading

Why verified numbers work