SendoraTelecom
Sign InGet Started
Data Protection & Confidentiality

Privacy Policy

This Privacy Policy explains how Sendora Global Technologies Ltd. collects, processes, protects, and retains your data when using our enterprise SMS platform and telecom gateway.

Effective Date: October 16, 2026•Compliance: GDPR & Ghana Data Protection Act (Act 843)•Scope: Global Telecom & Web Services
Our Privacy CommitmentWe treat message payloads, customer contact directories, and recipient telephone numbers with strict enterprise confidentiality. We never sell, rent, or monetize your contact directories or message bodies to advertisers or third-party marketers.

1Roles Under Data Protection Laws

Under global data privacy regulations (including the EU/UK General Data Protection Regulation and the Data Protection Act 2012, Act 843):

  • Sendora as a Data Controller: We act as a Controller for account registration details, payment transaction records, login credentials, and billing data related to our direct business relationship with you.
  • Sendora as a Data Processor: When you upload contact directories, dispatch SMS campaigns, or receive inbound replies via our two-way inbox, you are the Data Controller, and Sendora acts as a Data Processor carrying out your explicit instructions to transmit telecommunications payloads to downstream mobile operators.

2Information We Collect

Account & KYC Data

Full name, business name, authorized email address, contact phone number, and account verification credentials.

Telecom Traffic & Message Data

Recipient telephone numbers (MSISDN), message body text, Sender IDs, carrier delivery status receipts (DLR), and timestamps.

Payment & Wallet Top-Up Records

Mobile Money transaction references, amounts in Cedis or USD, and payment gateway transaction IDs (no raw card numbers stored).

Technical & Telemetry Data

IP addresses originating API calls, browser user-agents, authentication session tokens, and security error logs.

3How We Use Your Data

We process information strictly for legitimate telecommunication operations:

  • Telecommunication Routing: Transmitting outbound SMS text payloads to mobile network operators (MTN, Telecel, AirtelTigo, and global carriers) for final termination to recipient handsets.
  • Delivery Receipts (DLR): Receiving carrier delivery signals and updating your analytics dashboard in real time.
  • Two-Way Conversations: Syncing inbound customer replies to your workspace messenger inbox.
  • Opt-Out Enforcement: Automatically updating suppression lists when a user texts STOP or UNSUBSCRIBE to prevent future contact.
  • Security & Abuse Prevention: Detecting fraudulent account takeovers, unauthorized API key usage, smishing attacks, and carrier network abuse.

4Third-Party Data Disclosures

To deliver our telecom services, we share necessary data with trusted service providers under strict data processing agreements:

Licensed Telecom Carriers & Aggregators:Such as Arkesel, Hubtel, and direct telecom operator gateways to terminate SMS packets to mobile devices.
Payment Processors:Paystack and Flutterwave to securely verify and process wallet credit top-ups.
Transactional Email Infrastructure:Resend for dispatching 6-digit account verification codes and password recovery notices.

5Data Retention & Automatic Erasure

We enforce automated rolling retention cycles to minimize data storage risks:

  • SMS Content Bodies: Message text is retained in active storage for up to 90 days to allow for carrier delivery reconciliation and customer support inquiries, after which it is permanently purged.
  • Aggregated Metrics: Aggregate counts of delivered, failed, and opt-out messages are retained for historical reporting and trend analytics.
  • Billing & Tax Records: Top-up transaction records are retained for statutory periods required under tax regulations (typically up to 6 years).
  • Opt-Out Suppression Records: Phone numbers that have sent STOP are permanently suppressed to guarantee that opt-out choices remain respected.

6Security Safeguards & Data Encryption

Sendora implements comprehensive defense-in-depth technical and organizational security measures:

AES-256 EncryptionDatabase storage encrypted at rest with hardened file access controls.
TLS 1.3 in TransitAll web sessions, REST APIs, and carrier webhooks use encrypted HTTPS/TLS.
Bcrypt & JWTPasswords salted and hashed; session cookies protected with HTTP-only flags.

7Your Data Protection Rights

Depending on your location, you hold statutory rights regarding your personal information, including:

  • Right of Access: Request a full copy of the personal data held about your account.
  • Right to Rectification: Request correction of inaccurate contact or business details.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your contacts, workspace records, or user account.
  • Right to Portability: Export your contacts and message logs in standardized CSV or JSON formats.

To exercise any of these rights, please submit an official request to our Data Protection Officer at privacy@sendora.com.

8Contact Our Data Protection Officer (DPO)

For any questions or regulatory inquiries regarding our privacy standards or telecom carrier data processing:

Data Protection Officer

Sendora Global Technologies Ltd.

Email: privacy@sendora.com

Compliance Desk: compliance@sendora.com