Privacy Policy

1. Who We Are

eSMS Africa Infrastructure Ltd ("eSMS Africa", "we", "our", or "us") operates the SMS messaging platform at esmsafrica.io and sms.esmsafrica.io. We are incorporated in Kenya under Eira Digital Co. Limited, with offices in Nairobi, Kampala, and Abuja.

2. Information We Collect

Account & contact: Name, email, phone number, company name, billing details (processed via Flutterwave - we do not store card numbers), and business registration information for compliance verification.

Platform data: Messages sent through our API (destination numbers, sender IDs, delivery status), API keys, usage logs, account activity, and IP/device information.

Analytics: Page views, session duration, and referral sources, anonymised where possible.

3. How We Use Your Information

• Service delivery - process and route SMS messages, manage your account, provide support
• Billing - process payments, issue invoices, prevent fraud
• Compliance - meet regulatory obligations including KYC/AML requirements
• Communication - send transactional emails; with your consent, product updates
• Security - detect abuse, protect against fraud, maintain platform integrity
• Improvement - analyse usage patterns to improve our services

We do not sell your personal data. We do not use message content for advertising.

4. Data Sharing

• Telecom operators - destination numbers and sender IDs are shared with MNOs to deliver messages; this is inherent to the service
• Payment processors - Flutterwave processes payments under their own privacy policy
• Infrastructure providers - AWS, Cloudflare, and similar providers hosting our systems under data processing agreements
• Legal requirements - where required by law, court order, or regulatory authority

5. International Data Transfers

Your data may be processed in Kenya, Uganda, Nigeria, or other countries where we operate infrastructure. We apply appropriate contractual safeguards when transferring data across borders, consistent with applicable data protection frameworks.

6. Data Retention

• Account data - duration of account plus 7 years for legal and tax compliance
• Message logs - delivery records retained for 90 days; content not retained beyond delivery
• Billing records - 7 years as required by financial regulations
• Analytics - anonymised after 13 months

7. Your Rights

Subject to applicable law, you may request to access, rectify, erase, restrict, or receive a portable copy of your data, or withdraw consent where processing is consent-based. Email legal@eiradigital.com - we respond within 30 days.

8. Security

We use TLS 1.3 in transit, AES-256 at rest, role-based access controls, and audit logging. In the event of a breach affecting your rights, we will notify you as required by applicable law.

9. Cookies

We use essential cookies for sessions and platform functionality. With your consent, we use analytics cookies. See our Cookie Policy for details.

10. Children

Our services are not directed to anyone under 18. We do not knowingly collect data from minors. Contact us immediately if you believe we have done so inadvertently.

11. Changes to This Policy

Material changes will be communicated by email or platform notice at least 14 days before taking effect. Continued use after the effective date constitutes acceptance.

12. Contact

For privacy enquiries or to exercise your rights, contact: