What this covers
This policy describes how smspostam, a service operated by PostAm Swift Networks Ltd, collects, uses, stores, and shares personal data when you use our business SMS platform — the marketing site, the dashboard, and the APIs. It applies to everyone with a workspace, including team members invited by an account owner.
What we collect
We collect the following categories of data:
Account data
- Name, email address, and password (hashed) for each user.
- Workspace name, business details, support email, and country.
- Team membership and role assigned by the workspace owner.
Contact data you upload
- Phone numbers, normalized to E.164 format.
- Optional first name, last name, email, and any custom attributes you include in your upload.
- Consent source, timestamp, and proof URL if you provide one.
Messaging data
- Sender ID requests, including the submitted name, use case, and sample message.
- Campaign metadata — scheduled time, recipient list, message class, route.
- Message bodies as sent, plus per-recipient delivery outcome and failure reasons.
Financial data
- Wallet balances and the full append-only ledger of top-ups, reserves, spends, and releases.
- Invoices issued for each top-up.
- Payment metadata from our payment processor — we do not see or store full card numbers.
Technical data
- IP address, user agent, and request identifiers for audit logging.
- Cookies (see Cookie Policy).
Why we collect it
We collect the minimum we need to operate the service. Specifically, we use the data to:
- Run your workspace — authenticate users, route messages, reconcile billing.
- Provide delivery reports so you know what happened to each message.
- Enforce compliance — verify sender IDs, suppress unsubscribed numbers, block non-compliant sends at preflight.
- Detect and prevent abuse (fraud, spam, impersonation).
- Meet our legal and regulatory obligations in Nigeria.
We do not sell your data, and we do not use contact lists you upload for any purpose other than the sends you dispatch from your workspace.
Where we store it
Workspace data, contacts, messages, wallet ledgers, and delivery reports are stored in a managed Postgres database hosted on Supabase. Physical storage is in the region nearest our customer base; we will update this page when that region changes.
Backups are encrypted at rest. Access to production data is restricted to a small number of engineers and audited.
Who we share with
We share only what each third party needs to do its job:
- Termii — the SMS provider that carries our traffic to the Nigerian carriers. We pass them the recipient number, sender ID, message body, and our internal reference. They return the carrier's delivery outcome.
- Stripe — processes wallet top-ups. They receive the amount, currency, and your workspace and payment identifiers. They do not receive your contact lists, message bodies, or delivery data.
- Supabase — hosts the database and authentication. They process data on our behalf under a data-processing agreement.
- Inngest — runs our background jobs. They see job metadata (identifiers, status) but not message bodies.
We don't share your data with advertisers. We don't share it with other smspostam customers. We don't rent or sell contact lists.
How long we keep it
- Account data — for as long as your workspace is active, and for up to 12 months after closure for reconciliation.
- Contact data — until you delete the contact or the workspace.
- Message bodies — 12 months from dispatch, then rolled up into aggregate statistics only.
- Delivery reports — 12 months from dispatch.
- Wallet ledger — retained indefinitely for accounting and audit purposes. Rows are append-only.
- Audit logs — 2 years.
Your rights
You can access, correct, export, or delete data in your workspace at any time through the dashboard. For bulk or legacy data, email support@postamglobal.com with the subject Data request. We aim to respond within 5 business days and complete requests within 30 days.
Children
smspostam is for businesses. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email us and we'll delete it.
Changes to this policy
When we make material changes to this policy, we'll post an updated version here and notify active workspace owners by email. The version and last-updated date at the top of the page always reflects the current version.