## 1. Introduction
Welcome to Sociostacks SMS Gateway ("we," "our," or "us"). This Privacy Policy explains how GESTURE INFORMATIC LTD collects, uses, discloses, and safeguards your personal information when you use our SMS gateway platform, website (https://sms.sociostacks.com/), mobile application, and related services (collectively, the "Services").
We are committed to protecting your privacy and ensuring the security of your personal information. By accessing or using our Services, you agree to the terms of this Privacy Policy.
**Company Information:**
- **Legal Name:** GESTURE INFORMATIC LTD
- **Registered Address:** C97 KALKAJI, NEW DELHI - 110019, INDIA
- **Email:** support@sociostacks.com
- **Website:** https://sms.sociostacks.com/
---
## 2. Information We Collect
### 2.1 Information You Provide Directly
When you register for an account, use our Services, or contact us, we collect the following information:
**Account Registration:**
- Full name
- Email address
- Phone number
- Password (encrypted)
- Payment information (credit/debit card details, billing address)
- Company name and business information (if applicable)
**Device Information:**
- Device ID
- IMEI number
- Device model and manufacturer
- Operating system version
- Mobile network information
**Content Data:**
- SMS message content (text of messages you send and receive)
- Contact lists and phone numbers
- Contact parameters and custom fields
- Campaign data and statistics
- RSS feed URLs and configurations
**Support and Communications:**
- Information provided when you contact our support team
- Feedback, reviews, and survey responses
- Any other information you choose to provide
### 2.2 Information Collected Automatically
When you use our Services, we automatically collect certain information:
**Usage Data:**
- App usage analytics and patterns
- Features accessed and frequency of use
- Campaign performance metrics
- API calls and integration activities
- Login dates and times
- IP address
**Location Data:**
- Device location information (if you grant permission)
- Country and region data for service optimization
**Cookies and Tracking Technologies:**
We use the following types of cookies and similar tracking technologies:
- **Essential Cookies:** Required for the website and app to function properly
- **Analytics Cookies:** Help us understand how users interact with our Services (e.g., Google Analytics)
- **Advertising Cookies:** Used to deliver relevant advertisements and measure campaign effectiveness
- **Session Cookies:** Maintain your logged-in state and preferences
You can manage cookie preferences through your browser settings, but disabling certain cookies may limit functionality.
---
## 3. How We Use Your Information
We use the collected information for the following purposes:
### 3.1 Service Delivery
- Create and manage your account
- Process and fulfill SMS campaigns
- Enable device connectivity and synchronization
- Provide API access and integration support
- Store and manage your contacts and segments
- Track incoming and outgoing SMS messages
- Generate campaign analytics and reports
### 3.2 Service Improvement
- Analyze usage patterns to improve our Services
- Develop new features and functionality
- Optimize app performance and reliability
- Conduct research and analytics
- Troubleshoot technical issues
### 3.3 Communication
- Send service-related notifications and updates
- Respond to your inquiries and support requests
- Send marketing communications and promotional offers (with your consent)
- Notify you about account changes or policy updates
- Send push notifications (if enabled)
### 3.4 Security and Compliance
- Detect and prevent fraud, abuse, and security threats
- Monitor compliance with our Terms of Service
- Enforce our legal rights and comply with legal obligations
- Protect the safety and security of our users
### 3.5 Billing and Payments
- Process subscription payments
- Issue invoices and receipts
- Manage billing disputes and refunds
- Maintain transaction records
**Important Note:** We do NOT use your data to train artificial intelligence or machine learning models.
---
## 4. SMS Content and Access
### 4.1 SMS Message Content
As part of providing the SMS gateway service, we have access to:
- The content of SMS messages you send through our platform
- The content of SMS messages you receive on connected devices
- Contact information (phone numbers) associated with your messages
### 4.2 How We Handle SMS Content
- SMS content is stored on our servers for the duration specified in your plan (360 days or as per your subscription plan)
- We use SSL encryption to protect SMS data in transit
- Access to SMS content is limited to authorized personnel for support and technical purposes only
- We do not read, analyze, or use SMS content for any purpose other than service delivery and support
- We do not sell, rent, or share SMS content with third parties
### 4.3 Your Responsibility
You are solely responsible for:
- Obtaining proper consent from recipients before sending SMS messages
- Complying with applicable telecommunications and anti-spam laws
- Ensuring message content does not violate any laws or regulations
- Respecting recipient privacy and opt-out requests
---
## 5. Data Sharing and Disclosure
### 5.1 We Do Not Share Your Data with Third Parties
We do not sell, rent, trade, or share your personal information or SMS content with third parties for their marketing purposes.
### 5.2 Service Providers (Limited Disclosure)
While we do not routinely share data with third parties, we may engage trusted service providers who assist us in operating our Services, such as:
- **Payment processors** (for handling subscription payments securely)
- **Cloud hosting providers** (for data storage infrastructure)
- **Analytics tools** (Google Analytics for usage statistics)
These service providers are contractually obligated to protect your data and use it only for the purposes we specify.
### 5.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal requests from government authorities
- Court orders, subpoenas, or legal processes
- Situations necessary to protect our rights, property, or safety
- Prevention of fraud or security threats
### 5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.
---
## 6. Data Storage and Security
### 6.1 Data Storage Location
All data is stored on secure servers located in **INDIA**. We do not transfer your data internationally.
### 6.2 Security Measures
We implement appropriate technical and organizational security measures to protect your information:
- **Encryption:** All data transmission is encrypted using SSL/TLS protocols
- **Access Controls:** Limited access to personal data on a need-to-know basis
- **Regular Backups:** Automated backup systems to prevent data loss
- **Security Monitoring:** Continuous monitoring for unauthorized access and security threats
- **Password Protection:** Account passwords are encrypted and never stored in plain text
- **Secure Infrastructure:** Industry-standard security practices for server and database protection
### 6.3 Data Retention
**Account Data:** Retained for as long as your account is active
**SMS Data:** Retained for 360 days or according to your subscription plan:
- StartUp Plan: 180 days
- Institutional Plan: 1 year
- Custom Plan: 3 years
**Logs and Analytics:** Retained for up to 12 months for service improvement and security purposes
**Deleted Accounts:** When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain certain data.
### 6.4 Data Security Limitations
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.
---
## 7. Your Rights and Choices
### 7.1 Access and Portability
You have the right to:
- Access your personal information stored in our systems
- Request a copy of your data in a portable format (CSV, JSON, or PDF)
- Export your contacts, campaigns, and SMS logs through your dashboard
### 7.2 Correction and Updates
You can:
- Update your account information through your profile settings
- Correct inaccurate or incomplete data
- Request assistance from our support team for data corrections
### 7.3 Deletion and Account Closure
You have the right to:
- Delete your account at any time through your account settings
- Request deletion of specific data (subject to legal retention requirements)
- Withdraw consent for data processing (may limit service functionality)
To delete your account, go to Settings > Account > Delete Account, or contact support@sociostacks.com.
### 7.4 Marketing Communications
You can opt out of marketing communications by:
- Clicking "unsubscribe" links in promotional emails
- Adjusting notification preferences in your account settings
- Contacting us at support@sociostacks.com
Note: You will continue to receive essential service-related communications even after opting out of marketing.
### 7.5 Cookie Management
You can control cookies through your browser settings:
- Block all cookies (may impact functionality)
- Delete existing cookies
- Accept cookies selectively
- Receive notifications when cookies are set
### 7.6 Push Notifications
You can enable or disable push notifications through:
- Your device settings
- App notification preferences
- Website push notification settings
---
## 8. Compliance with Privacy Laws
### 8.1 GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
**Legal Basis for Processing:**
- **Contractual Necessity:** Processing necessary to provide our Services
- **Legitimate Interest:** For service improvement and security
- **Consent:** For marketing communications and optional features
**Additional GDPR Rights:**
- Right to object to processing
- Right to restrict processing
- Right to data portability
- Right to lodge a complaint with a supervisory authority
- Right to withdraw consent at any time
**Data Protection Officer:** For GDPR-related inquiries, contact support@sociostacks.com with subject line "GDPR Request."
### 8.2 India IT Act 2000 and DPDP Act 2023 Compliance
We comply with:
- Information Technology Act, 2000
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- Digital Personal Data Protection Act, 2023 (DPDP Act)
As required by Indian law:
- We obtain explicit consent for data collection and processing
- We implement reasonable security practices
- We provide mechanisms for grievance redressal
- We do not retain data longer than necessary
**Grievance Officer:** For complaints or concerns related to data protection, contact:
- Email: support@sociostacks.com
- Subject Line: "Data Protection Grievance"
- We will respond within 72 hours
---
## 9. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are under 18, do not use our Services or provide any information to us.
If we discover that we have collected information from a child under 18, we will delete it immediately. If you believe we have collected information from a child, please contact us at support@sociostacks.com.
---
## 10. International Data Transfers
We do not transfer your personal data outside of India. All data is stored and processed within Indian territory on servers located in India.
If we ever need to transfer data internationally in the future, we will:
- Notify you in advance
- Ensure adequate data protection measures are in place
- Obtain your explicit consent where required
---
## 11. Third-Party Links and Services
Our Services may contain links to third-party websites, services, or applications (such as payment processors). We are not responsible for the privacy practices of these third parties.
We encourage you to review the privacy policies of any third-party services before providing them with your information.
**Third-Party Integrations:**
- Payment processing (officesupport.in)
- Analytics services (Google Analytics)
- Notification services (email, Slack, Discord, Telegram, etc.)
Each integration has its own privacy policy that governs how your data is handled.
---
## 12. Business Transfers
If GESTURE INFORMATIC LTD is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will:
- Notify you via email and/or a prominent notice on our website
- Provide information about the new data controller
- Give you options regarding your data, including deletion prior to transfer
---
## 13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- For material changes, we will notify you via email and/or prominent notice on our website
- Continued use of our Services after changes constitutes acceptance of the updated policy
- We will maintain prior versions of this policy for your review
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
---
## 14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
**GESTURE INFORMATIC LTD**
**Email:** support@sociostacks.com
**Address:**
C97 KALKAJI
NEW DELHI - 110019
INDIA
**Website:** https://sms.sociostacks.com/
**Support:** https://sociostacks.com/support.html
**Response Time:** We aim to respond to all privacy-related inquiries within 72 hours.
---
## 15. Acknowledgment and Consent
By using our Services, you acknowledge that:
- You have read and understood this Privacy Policy
- You consent to the collection, use, and disclosure of your information as described
- You understand your rights and how to exercise them
- You are at least 18 years of age
If you do not agree with this Privacy Policy, please do not use our Services.
---
**Thank you for trusting Sociostacks with your SMS communications. Your privacy and security are our top priorities.**
---
*This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in New Delhi, India.*