Privacy Policy

Last Updated: May 26, 2026

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

1. Introduction

SMSYou ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our SMS messaging services.

By using SMSYou, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, phone number, company name
Payment Information: Encrypted directly in your browser before transmission. Raw card details are processed securely in volatile server memory for DPO Pay and are never persistently stored.
Message Content: SMS messages you send through our platform
Recipient Data: Phone numbers and names of message recipients
Support Communications: Information you provide when contacting customer support

2.2 Information Automatically Collected

Usage Data: Pages visited, features used, time spent on platform
Device Information: IP address, browser type, operating system, device identifiers
Log Data: API requests, error logs, system events
Cookies: Session cookies for authentication and preferences

2.3 Information from Third Parties

Payment Processor: Transaction status and payment confirmations from DPO Pay
SMS Carriers: Delivery status and network information

3. How We Use Your Information

We use your information for the following purposes:

Service Delivery: To send SMS messages on your behalf and manage your account
Payment Processing: To process transactions and prevent fraud
Customer Support: To respond to your inquiries and resolve issues
Service Improvement: To analyze usage patterns and improve our platform
Security: To detect and prevent fraud, abuse, and security incidents
Legal Compliance: To comply with legal obligations and enforce our terms
Communications: To send order confirmations, service updates, and important notices
Marketing: To send promotional offers (only with your consent, opt-out available)

4. Data Sharing and Disclosure

We share your information only in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who help us operate our business:

DPO Pay: Payment processing (subject to their privacy policy)
SMS Carriers: Message delivery to recipients

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

Court orders, subpoenas, or legal processes
Government or regulatory requests
Protection of our rights, property, or safety
Investigation of fraud or security issues

4.3 Business Transfers

If SMSYou is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.

We do NOT sell your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

Encryption: All data transmitted over HTTPS/TLS encryption
Secure Storage: Passwords hashed using bcrypt, sensitive data encrypted at rest
Access Controls: Role-based access, authentication required for all operations
Payment Security: PCI DSS SAQ-D compliant — card data is encrypted client-side, processed transiently in volatile memory, and immediately zeroed after use. Never logged or stored.
Monitoring: Continuous monitoring for security threats and anomalies
Regular Updates: Security patches and software updates applied promptly

While we strive to protect your information, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account Data: Retained while your account is active and for 2 years after closure
Message Content: Retained for 90 days for delivery tracking and support purposes
Transaction Records: Retained for 7 years for tax and accounting compliance
Log Data: Retained for 90 days for security and troubleshooting

You may request deletion of your data at any time, subject to legal retention requirements.

7. Your Privacy Rights

You have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you
Correction: Update or correct inaccurate information in your account settings
Deletion: Request deletion of your account and associated data
Portability: Request your data in a machine-readable format
Objection: Object to processing of your data for marketing purposes
Restriction: Request restriction of processing in certain circumstances
Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

To exercise these rights, please contact us at contact@smsyou.co. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies to:

Maintain your login session
Remember your preferences (language, currency)
Analyze usage patterns and improve our service
Prevent fraud and enhance security

You can control cookies through your browser settings. Disabling cookies may limit functionality of our Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Zambia, including the United States and European Union, where our service providers are located.

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete it.

11. Third-Party Links

Our Service may contain links to third-party websites (such as DPO Pay for payment processing). We are not responsible for the privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on our website
Updating the "Last Updated" date
Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SMSYou - Data Protection

Email: contact@smsyou.co

Website: https://smsyou.co

For data protection inquiries, please include "Privacy Request" in your email subject line.

GDPR Compliance

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). You have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.

By using SMSYou, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting your privacy and handling your data responsibly.