Privacy policy

1. Who processes the data

For the contacts a customer sends messages to (numbers, names, other fields) the customer is the controller; Messedo processes that data on the customer's behalf and only to send messages and reports.

Personal data requests: support@messedo.com.

2. What data we process

• Registration and profile: name, e-mail, phone number; for a Sender ID request — company name, company or tax code, address, website. The system generates the password and sends it to you by SMS and e-mail.
• Where you came from: the page you came to the website from and campaign tags (UTM) are stored in the account at registration.
• Data you upload: contact groups (numbers, names, birthdays, notes), message texts and templates, sender names.
• Messages and statistics: recipient number, sender, text, time, cost and delivery status of every message.
• Short-link clicks: time, IP address, device platform and browser — for the click statistics in the customer's dashboard.
• Payments: amount, date, status and invoices. Card details are entered on the WayForPay page; Messedo does not receive or store the full card number.
• Technical data: IP addresses of dashboard sign-ins and of API/SMPP requests, web server logs (IP address, browser, page, time).
• Requests: the name, e-mail and text sent through the website form arrive by e-mail at support@messedo.com.

3. Why

• providing the Service: sending messages, delivery reports, balance and charges;
• security: protection against unauthorised access, spam and fraud, review of sender names and texts;
• support and answers to requests;
• service e-mails and SMS: password, balance, changes of prices and terms;
• website analytics and understanding where customers come from;
• news and offers of Messedo — you can opt out by writing to support@messedo.com.

Legal bases: performance of the contract (Terms of service), Messedo's legitimate interests (security, analytics), legal obligations and, for marketing e-mails, your consent.

4. Cookies and analytics

You can delete or block cookies in your browser settings; without the technical cookies the dashboard sign-in will not work.

5. Who receives the data

• Mobile operators and SMS partners — recipient number, sender and text, without which a message cannot be delivered;
• Viber — for Viber campaigns of customers with Viber activated;
• WayForPay — for online card payments;
• Altegio — if the customer connected the integration: the API key, approved sender names and payment information for that location;
• Google (Tag Manager / Analytics, reCAPTCHA) and Tawk.to — as described in the cookies section;
• hosting providers whose servers run the Service;
• public authorities — only where and as required by law.

Messedo does not sell personal data.

6. Where the data is stored

The main Messedo servers are in a data centre in Germany (EU). Encrypted backups and a standby server for recovery are in Ukraine. The partners in section 5 may process data in their own countries.

7. Retention

• account data, contacts, message and payment history — while the account exists;
• after the account is deleted — no longer than 1 year in backups and archives, unless the law requires longer (for example, accounting documents);
• accounts without any payment or message that have not been signed in to for more than 180 days may be deleted together with their data;
• web server logs — 14 days;
• form requests — in the support mailbox while needed for the answer and the conversation history.

8. Security

The website, the dashboard and the API work over HTTPS (TLS) only; SMPP is also available over TLS. Sign-in attempts are limited; an account may require an SMS code to sign in from a new IP address; API and SMPP access can be limited to a list of IP addresses. Staff access to customer data is limited to the needs of support, moderation and billing.

No method of transmission or storage is absolutely secure, so keep your password and API token secret.

9. Your rights

You can ask which of your data we process, correct it (most of it in the dashboard profile), ask to delete the account and the data, object to processing or withdraw consent to marketing e-mails. Write to support@messedo.com or use the contact form; to protect you we may ask you to confirm that the account is yours. You may also complain to your data protection authority (in Ukraine — the Ukrainian Parliament Commissioner for Human Rights).

If you received a message from one of our customers and do not want to receive more, contact the sender or write to us — we will pass the request on and can add the number to that customer's stop list.

10. Changes

We update this Policy when the Service or the law changes. The current edition and its date are always published on this page; customers are told about material changes by e-mail.