Privacy Policy

1. Introduction

MessageFlowSms ("we", "us", "our") provides multi-tenant messaging services including SMS, voice, email, and WhatsApp Business tools for organizations in Ghana and internationally. This Privacy Policy explains how we handle personal data when you visit our marketing site, create a tenant account, invite users, import contacts, send messages, or use our APIs.

2. Information We Collect

• Account data: name, work email, phone number, organization name, role, and authentication credentials.
• Tenant & usage data: campaign metadata, delivery statuses, wallet balances, feature usage, device/browser info, and IP addresses.
• Contact lists you upload: phone numbers, names, emails, and custom fields you choose to store for messaging.
• Support communications: messages you send to support@messageflowsms.com or via contact forms.
• Payment signals: transaction references and status from Paystack. We do not store full card or Mobile Money PINs on our servers.

3. How We Use Information

We use personal data to:

• Provide, operate, and improve the messaging platform and APIs
• Authenticate users, enforce role-based access, and protect accounts
• Process wallet top-ups, credit bonuses, and billing receipts
• Route messages through carriers and channel providers and report delivery
• Detect fraud, spam, abuse, and security incidents
• Send product notices, trial reminders, and support responses
• Comply with legal obligations and enforce our Terms of Service

4. Legal Bases

Depending on your location, we process data under contract performance (to deliver the service you signed up for), legitimate interests (security, product improvement, anti-abuse), consent (where required for marketing cookies or optional features), and legal obligation (tax, accounting, and regulatory requests).

5. Sharing & Processors

We do not sell personal data. We share limited data with processors who help us run the service, including:

• Infrastructure and database providers hosting tenant workloads
• Paystack for Mobile Money and card payment processing
• Messaging and telecom partners required to deliver SMS, voice, email, or WhatsApp
• Email delivery and analytics providers used for product communications

We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer subject to confidentiality safeguards.

6. Message Content & Contacts

You (the tenant) are the controller of contact lists and message content you upload or send. MessageFlowSms acts as a processor to transmit and log messages for delivery, troubleshooting, and analytics. You are responsible for having a lawful basis (including consent where required) to message recipients and for complying with Ghana's Data Protection Act, 2012 (Act 843) and other applicable laws.

7. Payments

Wallet top-ups are processed by Paystack. Payment credentials are handled by Paystack under their privacy terms. We store transaction IDs, amounts in GH₵, channel used (MoMo/card/bank), and resulting credit balances for accounting and customer support.

8. Security

We apply encryption in transit (TLS), access controls, tenant isolation, audit logging, and least-privilege administrative practices. No method of transmission or storage is 100% secure; please use strong passwords and protect API keys. Report suspected incidents to privacy@messageflowsms.com.

9. Retention

We retain account and billing records for as long as your tenant is active and as needed for legal, tax, and dispute purposes. Message logs and contact data are retained according to your account settings and our operational needs, after which they may be deleted or anonymized. You may request deletion subject to legal holds and technical constraints.

10. International Transfers

Data may be processed in Ghana and other countries where our infrastructure or subprocessors operate. When we transfer personal data internationally, we use appropriate safeguards such as contractual protections with processors.

11. Your Rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of personal data, and object to certain processing. Account owners can update many fields directly in Settings. For other requests, email privacy@messageflowsms.com. We may need to verify your identity before fulfilling a request.

12. Children

MessageFlowSms is a business service and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.

13. Cookies & Analytics

We use essential cookies for authentication and security, and limited analytics (including Vercel Analytics) to understand product usage and improve performance. You can control cookies through your browser settings; disabling essential cookies may break sign-in.

14. Changes

We may update this Privacy Policy from time to time. The "Last updated" date will change, and material updates may be communicated by email or in-product notice.

15. Contact

Privacy questions: privacy@messageflowsms.com
Support: support@messageflowsms.com
Location: Accra, Ghana · Phone: +233 249 397 960

Also see our Terms of Service and FAQ.