Privacy Policy

1By0 Solutions ("SMSTAKE", "we", "us", or "our") operates the SMSTAKE cloud communication platform and website at smstake.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including Bulk SMS, RCS, WhatsApp Business API, Voice, and related API services across India.

By using our platform, you agree to the practices described in this policy. We comply with applicable Indian laws, including the Information Technology Act, 2000, IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act), where applicable.

1. Information We Collect

1.1 Information You Provide

• Account registration details: name, company name, email, phone number, billing address
• KYC and business verification documents for DLT and regulatory compliance
• Payment and invoicing information
• Support tickets, demo requests, and communication preferences
• Message content, templates, sender IDs, and campaign data submitted through our platform

1.2 Information Collected Automatically

• IP address, browser type, device information, and access logs
• API usage metrics, delivery reports, and platform analytics
• Cookies and similar technologies (see Section 8)

1.3 Information from Third Parties

We may receive information from telecom operators, WhatsApp/Meta, payment gateways, and identity verification providers to deliver and verify our services.

2. How We Use Your Information

• Provide, operate, and maintain our communication services across India
• Process message delivery via SMS, RCS, WhatsApp, and Voice channels
• Facilitate TRAI DLT registration, template approval, and regulatory compliance
• Authenticate users, prevent fraud, and ensure platform security
• Process payments, send invoices, and manage subscriptions
• Provide customer support and respond to inquiries
• Send service-related notifications, updates, and marketing (with consent where required)
• Improve our platform, APIs, and user experience through analytics
• Comply with legal obligations, court orders, and regulatory requests

3. How We Share Your Information

We do not sell your personal data. We may share information with:

• Telecom operators and channel partners - to deliver SMS, RCS, Voice, and related messages in India
• WhatsApp / Meta - for WhatsApp Business API message delivery
• DLT portals and regulators - as required by TRAI and applicable Indian regulations
• Service providers - hosting, payment processing, analytics, and support tools under confidentiality agreements
• Legal authorities - when required by law or to protect rights, safety, and security
• Business transfers - in connection with mergers, acquisitions, or asset sales, with notice where required

4. Data Retention

We retain personal data only as long as necessary to provide services, meet legal and regulatory requirements (including TRAI/DLT record-keeping), resolve disputes, and enforce agreements. Message logs and delivery records may be retained as per operator and regulatory requirements, typically up to 6 - 24 months unless a longer period is mandated by law.

5. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES encryption at rest, access controls, IP whitelisting, two-factor authentication, and regular security audits. While we strive to protect your data, no method of transmission over the internet is 100% secure.

6. Your Rights

Under applicable Indian law, including the DPDP Act, you may have the right to:

• Access and obtain a copy of your personal data
• Correct inaccurate or incomplete data
• Request erasure of data, subject to legal and contractual obligations
• Withdraw consent for marketing communications
• Nominate another individual to exercise rights in the event of death or incapacity
• Lodge a grievance with our Data Protection Officer or the Data Protection Board of India

To exercise these rights, contact us at info@smstake.com. We will respond within 30 days.

7. Children's Privacy

Our services are intended for businesses and individuals aged 18 and above. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately.

8. Cookies & Tracking

We use essential cookies for authentication, session management, and security. We may use analytics cookies to understand platform usage. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

9. Cross-Border Data Transfers

Our primary data processing occurs within India. Where data is transferred outside India, we ensure appropriate safeguards consistent with applicable law.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. We encourage you to review their policies before providing personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. Continued use after changes constitutes acceptance of the updated policy.

12. Contact & Grievance Officer