Privacy policy

What we store

Account: a one-way fingerprint of your account key used for sign-in, an encrypted copy of the key that our payments team uses to match top-ups to the right account, the date you joined, your opt-out line and optional company label, and the type of device and the page that referred you on your first visit.

Network: a one-way fingerprint of the IP address used at sign-up, which limits how many accounts one network can open. The address itself is not stored.

Campaigns: the recipient numbers, message texts, merge values, statuses and times, so that reports, refunds and billing stay complete.

Payments: amounts, payment method, transaction reference and status for each top-up.

API: a one-way fingerprint of your API key, your webhook URL and webhook secret.

Why we use it

To sign you in, send and report your messages, keep your balance and billing correct, answer support tickets and protect the service from abuse. We do not sell data and we do not use your recipient lists for anything other than your own campaigns.

Who receives it

Destination networks receive the recipient number and message text needed to deliver each message. Our payment processing receives the information needed to confirm a top-up. Nothing else is shared unless the law requires it.

Cookies

bso_session keeps you signed in for up to 60 days. bso_src remembers for 30 days whether your first visit came from a link, so we know which pages help people find us. These two are the only cookies we set.

How long we keep it

Account, campaign and payment records stay while your account exists so your history remains available. When an account is closed, records needed for billing are kept and the account itself is anonymised.

Your choices

Open a support ticket to ask for a copy of your data, a correction or the closing of your account. We answer through the same ticket.