1. Scope and roles
This policy applies to personal information handled through the Ironhand SMS website, accounts, support, and platform. When a customer uploads contacts or sends messages, that customer generally determines why and how recipient data is used, and Ironhand SMS processes it to provide the service. Customers must provide their own notices and establish a lawful basis.
2. Information we collect
We may collect account and profile details; company and billing information; authentication and security data; support communications; device, browser, IP, cookie, and usage information; payment transaction references; and service configuration data.
To provide messaging services, we also process information submitted by customers, such as contact details, custom fields, message content, sender information, subscription status, delivery records, and engagement data.
3. How we use information
We use information to provide and administer accounts; authenticate users; process payments; route and report messages; deliver support; prevent fraud and abuse; maintain security; comply with law; improve performance; communicate service notices; and, where permitted, present relevant product information.
4. Legal bases
Depending on the context and applicable law, processing may rely on performance of a contract, legitimate interests, compliance with legal obligations, protection of rights and security, or consent. Where consent is the basis, it may be withdrawn without affecting earlier lawful processing.
5. Sharing and service providers
We may share information with messaging gateways, carriers, hosting and infrastructure providers, payment processors, security and analytics providers, professional advisers, and authorities when legally required. We may also disclose information in connection with a corporate transaction. Providers are permitted to use information only for authorized purposes and subject to appropriate obligations.
6. International transfers
Providers, carriers, and message recipients may be located outside your country. Where required, we use appropriate transfer safeguards. Messaging traffic may necessarily traverse jurisdictions selected by the customer, recipient, gateway, or carrier.
7. Retention
We retain information for as long as reasonably needed to provide the service, meet contractual and legal obligations, resolve disputes, prevent abuse, and enforce agreements. Retention periods vary by data type, account status, configuration, and applicable law. Customers control deletion of certain data through available account tools.
8. Security
We use administrative, technical, and organizational measures designed to protect information. No transmission or storage method is completely secure. Customers must use strong credentials, restrict account access, protect API keys, and promptly report suspected compromise.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent or complain to a regulator. Account holders can update certain information directly. Recipient requests concerning customer-controlled campaign data should normally be directed to the customer that sent the message.
10. Cookies
We use necessary cookies for authentication, security, preferences, and core operation. With the choices presented to you, we may also use analytics or other optional technologies. You can review or change available choices through the cookie preferences interface. Browser settings may also limit cookies, but some features may stop working.
11. Children
The service is intended for business users and is not directed to children. Customers must not use the platform to collect or process children’s information unless they have a lawful basis and all required permissions.
12. Updates and contact
We may update this policy as our service and legal obligations change. We will post the current version and update the date shown above. Privacy questions and rights requests may be submitted through your account support channel. The service operator is located in Mexico City, Mexico.