Privacy Policy

Section 1

Information We Collect

Personal Information You Provide

• Account registration details (name, email, password)
• Contact information (phone number, business name)
• Payment and billing information
• Profile information and preferences
• Communications with our support team
• Feedback, reviews, and survey responses

Automatically Collected Information

• Device information (model, OS version, unique identifiers)
• Usage data (features used, SMS sent/received, API calls)
• Log data (IP address, browser type, access times)
• Performance data (app crashes, errors, response times)
• Location data (country, region based on IP)
• Cookies and tracking technologies

SMS Content and Metadata

• Message content and metadata associated with API sends (treat SMS bodies as sensitive; carrier delivery is not app-to-app E2E encryption)
• Sender and recipient phone numbers
• Delivery timestamps and status
• Message routing information
• Delivery reports and analytics

Section 2

How We Use Your Information

Service Operations

• Provide and improve SMS gateway services
• Process and deliver SMS/MMS messages
• Generate delivery reports and analytics
• Manage your account and billing
• Provide customer support and respond to inquiries

Communications

• Send service updates and important notices
• Provide security alerts and notifications
• Share product updates and new features
• Send billing statements and invoices
• Respond to your requests and questions

Analytics and Improvement

• Study how you use our services to make them better
• Watch and improve platform performance
• Develop new features based on user needs
• Conduct research and analytics
• Test new functionality and features

Security and Compliance

• Detect and prevent fraud and abuse
• Monitor for suspicious activities
• Ensure compliance with laws and regulations
• Enforce our terms and policies
• Protect our rights and property

Section 3

Information Sharing

We DO NOT Sell Your Data

• We never sell your personal information to third parties
• We never share your data for advertising purposes
• Your message content remains private and confidential

Limited Sharing with Service Providers

• Cloud hosting providers (encrypted data storage)
• Payment processors (Stripe, PayPal - for billing only)
• Analytics services (anonymized usage data)
• Customer support tools (for ticket management)
• Email service providers (for transactional emails)

Legal Requirements

• Comply with legal processes and government requests
• Enforce our terms and policies
• Protect against fraud and security threats
• Protect our rights, property, and safety
• In connection with business transfers or acquisitions

Section 4

Data Security Measures

Encryption

• HTTPS/TLS encryption for API and panel traffic
• Account and control-plane data encrypted at rest by our hosting providers where available
• SMS over the carrier radio uses the operator's standard path — not end-to-end encryption between apps
• Encrypted database backups where offered by our hosting providers
• Secure API authentication with tokens

Access Controls

• Multi-factor authentication (2FA) available
• Role-based access control (RBAC)
• IP whitelisting options
• Session management and timeout
• Audit logs for all access attempts

Infrastructure Security

• Hosting defaults oriented to least privilege and network isolation
• Dependency and vulnerability monitoring on a regular cadence
• DDoS-aware edge protection and API rate limiting where configured
• Security patches applied as part of routine maintenance
• Security reports routed to info@sms-gateway.app (subject: Security report)

Section 5

Your Privacy Rights

Access and Control

• Access your personal data at any time
• Export your data in machine-readable format
• Update or correct inaccurate information
• Request deletion of your personal data
• Opt-out of marketing communications
• Restrict or object to data processing

GDPR Rights (EU Users)

• Right to be informed about data collection
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising rights

How to Exercise Your Rights

• Email us at info@sms-gateway.app
• Use the privacy settings in your account dashboard
• Submit a data request through our web portal
• We will respond within 30 days of your request
• Identity verification may be required

Section 6

Data Retention

Retention Periods

• Account data: Retained until account deletion
• Message content: 90 days (configurable up to 1 year)
• Delivery logs: 180 days for analytics
• Payment records: 7 years for tax compliance
• Support tickets: 2 years after resolution
• Deleted data: Permanently removed within 30 days

Section 7

Cookies and Tracking

Types of Cookies We Use

• Essential cookies: Required for login and core functionality
• Performance cookies: Monitor site performance and errors
• Analytics cookies: Understand user behavior (anonymized)
• Preference cookies: Remember your settings
• Session cookies: Maintain your login state

Cookie Control

• You can control cookies through browser settings
• Blocking essential cookies may break some features
• We honor Do Not Track (DNT) signals
• Third-party cookies from payment providers may be used

Section 8

International Transfers

Data Processing Locations

• Data may be processed in the United States
• Where required, we use Standard Contractual Clauses (SCCs) for EU/UK transfers
• We prefer providers that participate in the EU-US Data Privacy Framework when available
• Additional contractual and technical safeguards for international transfers
• We do not rely on the invalidated EU-US Privacy Shield framework