Privacy Policy

1. Introduction

RelSMS ("we," "our," or "us") operates as an SMS gateway platform serving organizations across Uganda and East Africa. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in compliance with Uganda's Data Protection and Privacy Act, 2019, and other applicable East African data protection laws.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us:

• Account registration details (name, email address, phone number)
• Organization information (company name, business registration details)
• Payment information (mobile money numbers, billing addresses)
• Communication preferences and support inquiries

2.2 SMS and Communication Data

When you use our SMS services, we process:

• Recipient phone numbers and message content
• Delivery reports and message status information
• API usage logs and integration data
• Webhook endpoints and callback data

2.3 Technical Information

We automatically collect certain technical data:

• IP addresses and device information
• Browser type and operating system
• API access logs and usage patterns
• Performance and error monitoring data

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Processing and delivering SMS messages, managing your account, and providing customer support
• Billing and Payments: Processing credit purchases and managing Mobile Money transactions (MTN Mobile Money, Airtel Money)
• Platform Security: Preventing fraud, unauthorized access, and ensuring platform integrity
• Legal Compliance: Meeting obligations under Ugandan telecommunications regulations and data protection laws
• Service Improvement: Analyzing usage patterns to enhance our platform and develop new features

4. Data Sharing and Disclosure

4.1 Service Providers

We may share your information with trusted service providers who assist us in operating our platform:

• Mobile Network Operators (MTN Uganda, Airtel Uganda) for SMS delivery
• Mobile Money service providers for payment processing
• Cloud hosting providers for secure data storage
• Security and monitoring services for platform protection

4.2 Legal Requirements

We may disclose your information when required by law, including compliance with Uganda Communications Commission (UCC) regulations, court orders, or to protect our rights and the safety of our users.

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the business assets, subject to applicable data protection laws.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security audits and vulnerability assessments
• Access controls and multi-factor authentication for our systems
• Secure API authentication using encrypted keys
• Regular backups and disaster recovery procedures

6. Data Retention

We retain your information for the following periods:

• Account Information: Retained while your account is active and for 2 years after account closure
• SMS Message Data: Stored for 12 months for delivery confirmation and troubleshooting purposes
• Billing Records: Retained for 7 years as required by Ugandan tax and business regulations
• API Logs: Retained for 90 days for security and troubleshooting purposes

7. Your Rights Under Ugandan Law

Under Uganda's Data Protection and Privacy Act, 2019, you have the following rights:

• Right of Access: Request copies of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to certain types of data processing

To exercise these rights, please contact us using the information provided in Section 11 below.

8. International Data Transfers

Your data is primarily stored and processed within Uganda and East Africa. If we need to transfer your data outside of Uganda, we will ensure appropriate safeguards are in place as required by the Data Protection and Privacy Act, 2019, including data processing agreements and security measures.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

12. Regulatory Compliance

RelSMS is committed to compliance with:

• Uganda's Data Protection and Privacy Act, 2019
• Uganda Communications Commission (UCC) regulations
• Mobile Money service provider requirements
• East African Community data protection frameworks

If you have complaints about our data processing practices, you may also contact the National Information Technology Authority Uganda (NITA-U) or the Uganda Communications Commission (UCC).