iSMSPrivacy policy
English · Greek
This policy explains what personal data iSMS keeps, why, and what rights you have. Controller of your account data: KyrosNext LLC.
1. What we keep
- **Account:** name, email, mobile and other phone, country, username, a hashed password, language and time zone, and invoice details if you give them.
- **Use of the service:** your contacts and groups, the messages you send (text, sender name, recipients, time, price and delivery status), credits and payments, API keys (stored as a hash), and the history of your account.
- **Technical data:** IP address, time of sign-in and of failed sign-ins, and a sign-in cookie. We use this cookie only to keep you signed in. We do not use advertising cookies.
- **Messages from your subscription pages:** the number, name and groups of people who subscribe.
2. Why, and on what basis
- To run your account and send your messages (a contract with you).
- To charge, invoice and keep accounting records (legal duty).
- To protect the service against abuse, fraud and attacks, and to keep it working (our legitimate interest).
- To email you about your account and the service (contract; legitimate interest).
3. Your recipients
When you send messages to your own contacts, you decide why and how. We process their numbers and the message only to deliver it, on your behalf. You must have the right to contact them.
4. Who receives data
- Mobile operators and SMS partners, who need the number and the text to deliver a message.
- Payment services, when you pay.
- Email and hosting services that we use to run the service.
We do not sell personal data. We may disclose data when the law or a competent authority requires it.
5. Transfers outside the EU
A message may pass through operators and partners in other countries. Where data leaves the EU/EEA, we rely on a legal basis that the law allows, such as an adequacy decision or standard contractual clauses.
6. How long we keep it
- Account details: while the account is open and for as long as the law requires afterwards.
- Message records: 12 months, then they are deleted or anonymised.
- Accounting records: for the period the law requires.
- Technical logs: period, 90 days.
7. Your rights
You can ask to see, correct, delete or move your data, to limit or object to its use, and to withdraw a consent. Write to info@kyrosnext.com. You can also complain to your data protection authority.
8. Security
Passwords are stored hashed, keys are stored hashed, connections use encryption, and access is limited. No system is perfectly safe, and we tell the people concerned and the authority where the law requires.
9. Changes
We may update this policy and will say so in the service.
10. Contact
Questions about your data: info@kyrosnext.com.