This Privacy Policy explains how SS Infoserve ("we", "us"), operating TextNSMS at textnsms.com, collects, uses, shares and protects personal data when you use our website, dashboard and APIs. We process personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable laws.
1. Information we collect
- Account data: your name, company name, email address, mobile number, country, business type and password (stored only as a secure hash).
- Business verification data: GST, PAN, DLT entity details and other documents you upload for KYC.
- Payment data: amount, status, method type and transaction references returned by our payment gateway. We never store your full card number, CVV or UPI PIN.
- Customer content: contact lists, templates, campaign content and message logs that you upload or send through the platform.
- Technical data: IP address, browser, device, log-in times and API request logs, used for security and troubleshooting.
2. How we use your information
- To create and manage your account, verify your business and provide the messaging services you request.
- To process recharges, maintain your wallet ledger and issue GST invoices.
- To route your messages through telecom operators and messaging providers, and to show you delivery reports.
- To meet legal obligations, including TRAI and DLT requirements, tax law and lawful requests from authorities.
- To detect fraud, spam and abuse, and to keep the platform secure.
- To send you service notices. We send marketing emails only with your consent, and you can opt out at any time.
3. Your contacts' data
- For contact lists and message content you upload, you are the Data Fiduciary and we act as your Data Processor. You are responsible for having valid consent to message those people.
- We use that data only to deliver your messages and reports. We do not sell it or use it to market to your contacts.
- Each customer's data is kept separate from every other customer's data.
5. Retention
Account data is kept while your account is active. Message logs are kept for 12 months by default. Financial and invoice records are kept for at least 8 years to meet tax law. Data is deleted or anonymised when no longer needed.
6. Security
We use HTTPS encryption, hashed passwords, encrypted provider credentials, role-based access, audit logs and regular backups. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a personal data breach as the law requires.
7. Your rights
You can access, correct or update your personal data from your account settings, or ask us to erase it. You can withdraw consent, nominate another person to exercise your rights, and raise a grievance with us. Write to the Grievance Officer below; we will respond within the time the law requires.
9. Grievance Officer
Name: To be appointed. Email: grievance@textnsms.com. Address: Registered address to be added.
10. Changes
We may update this policy. We will post the new version here and notify account holders of material changes.