Each clause starts with an In short line for reading speed. The full text underneath is the one that binds. Numbering is stable across versions so clauses can be cited.
1What we collect
In shortAn email address, your messages and their delivery data, your deposits. Nothing about your identity.
We collect the email address you register with; the phone numbers, message content and delivery information of the messages you send; the transactions credited to your balance (addresses, amounts, transaction identifiers); API keys and endpoint configuration; and technical logs (IP address, user agent, timestamps) for security and abuse prevention. We do not collect identity documents, names beyond what you type, or payment card data.
2Why
In shortTo run the service, bill it, secure it and answer you. Nothing else.
We process this data to provide the service you request, to compute and debit prices, to prevent abuse and secure accounts, to comply with legal obligations, and to answer your messages. We do not profile you, do not sell data, and do not use message content for advertising or training.
3Recipients of your messages
In shortTheir numbers and your text pass through us to carriers. That is the service.
To deliver a message we transmit the destination number, the content and the sender identifier to the carrier serving the number, and to the intermediate routes required to reach it. Carriers process this data under their own obligations. We keep the message and its delivery status for 90 days.
4How long
In short90 days for messages and delivery data; account data for the life of the account; logs 30 days.
Message content and delivery data: 90 days, then deleted. Campaign summaries without content: for the life of the account. Account data: until the account is closed, then 30 days. Deposit records: as long as accounting law requires. Technical logs: 30 days. Contact form messages: until the conversation is closed, then 90 days.
5Where and who
In shortOur own servers, encrypted in transit and at rest. Carriers see what they must to deliver. No advertising vendors.
Data is stored on infrastructure we operate or lease, encrypted in transit and at rest. It is shared with carriers and routes to deliver messages, and with infrastructure providers bound by confidentiality. We use no advertising or analytics vendors on this site.
6Your rights
In shortAccess, correct, export, delete. Write to us; we answer within 30 days.
You may access, correct, export and delete your data, and object to processing, subject to legal retention duties. Requests go to [email protected] from the account address; we answer within 30 days. You may also complain to your local data protection authority.
7Cookies
In shortOne session cookie when you log in. Nothing on the public pages.
The public pages set no cookies and load no third-party resources. The panel sets a session cookie strictly necessary to keep you logged in, and a preference cookie if you change display settings. There are no tracking or advertising cookies.
8Security
In shortEncryption, scoped API keys, two-factor authentication, incident disclosure.
We use TLS everywhere, encrypt stored data, scope API keys, offer two-factor authentication and monitor for abuse. If a security incident affects your data we notify the account address without undue delay and publish what we can on the status page.
9Changes and contact
In shortUpdates are dated at the top; material ones are announced. Questions to [email protected].
This policy may be updated; the effective date is at the top and material changes are announced on the blog. Questions and requests: [email protected].
Version 1.2, effective 2026-09-21. Earlier versions on request at [email protected].