Legal
Privacy policy
What we keep
A keyed hash of your account key and of each API key, never the keys themselves. An encrypted copy of the account key is kept so payment notices can name your account.
The messages you send: numbers, texts, prices and statuses, so that you can read them in the console and the API.
Top-ups and the balance ledger, support tickets, your webhook address and settings.
A keyed hash of the network address an account was opened from (to apply the accounts-per-address limit), the device type and the time of your last visit.
What we do not keep
No name, email address, phone number of your own or password is needed to open an account. We do not use advertising trackers or analytics scripts; the console sets one session cookie.
How data is used
Message numbers and texts are used to deliver the messages and report their status. Account data is used to run the account, the balance and support. We do not sell or rent data, and we do not use your messages for anything else.
Logs
The request log keeps your last 500 API calls (method, path, status, time) and the webhook log your last 500 deliveries, so you can debug integrations. Idempotency records are kept for 24 hours.
Payments
Top-ups go through a hosted checkout. The checkout handles the payment details; we receive the amount, the method, the transaction id and the result.
Your choices
You can ask through the Support page for your account to be closed. Accounts with no records are deleted; accounts with payments or messages are anonymised, and the money records are kept as accounting requires.