Privacy Policy: ZendSMS App

Service identity and scope

ZendSMS is a brand operated by Diana Host Limited. This policy applies to the ZendSMS online-store app, including an installation obtained through the Shopify App Store, and works together with the general ZendSMS Privacy Policy.

• BTRC A2P Enlistment No. BTRC-A2P-23-144
• Website: https://zendsms.com
• Privacy contact: admin@zendsms.com

Store and account data

When a merchant installs or uses the App, we may process the minimum data needed to authenticate the store and provide the selected functions.

• Store domain, installation status and platform identifiers
• Offline session or access tokens supplied by the commerce platform
• ZendSMS API credentials, sender ID, administrator numbers, templates and event preferences entered by the merchant
• Account, billing, support and diagnostic records

Order, recipient and message data

To send a notification selected by the merchant, the App may receive order and customer fields from authorised platform events.

• Recipient name and mobile number
• Order number, status and relevant order details selected for the template
• Message content, sender ID, event type, timestamp, delivery status and related identifiers
• The App does not need full payment-card details and merchants must not place passwords or unrelated sensitive data in SMS templates

How data is used

We use App data only to operate the merchant’s requested messaging workflow and meet security, support, platform, telecom and legal obligations.

• Authenticate and maintain the installation
• Prepare and submit configured SMS notifications
• Display message history and delivery results
• Prevent abuse, investigate faults and support the merchant
• Respond to lawful privacy, operator or regulatory requests

Sharing and delivery providers

Destination numbers and message content are transmitted to the ZendSMS API, mobile-network and approved routing or technology providers only as needed to deliver, secure and report the requested message. We do not sell merchant or recipient information for independent marketing.

Retention, uninstall and deletion

We retain App settings, logs and related records only for the period reasonably needed for service operation, billing, support, fraud prevention, dispute handling and applicable platform, operator or legal requirements.

• A valid shop-redact request removes that shop’s App sessions, settings and eligible message logs
• A valid customer-redact request removes eligible records that can be matched to the stated customer or orders
• A customer-data request returns the eligible App records we hold for that customer
• Some records may be retained where law, regulatory direction, security or accounting rules require it

Merchant responsibilities

The merchant decides which customers receive messages and remains responsible for lawful authority, recipient consent where required, approved sender identities and templates, accurate destination numbers, promotional opt-out handling and compliance with BTRC, operator and applicable legal requirements.

Security and access

We use access controls, logging and reasonable technical and organisational safeguards designed to protect App data. Merchants must protect store accounts, ZendSMS credentials and administrator access, rotate exposed credentials and notify us promptly of suspected misuse.

App charges and service terms

The App is free to install unless the listing states otherwise. SMS use is charged against the merchant’s ZendSMS account under the applicable quotation, rate and ZendSMS Terms of Service. The ZendSMS no-refund rules apply to SMS credits and paid services.

Requests, changes and contact

Merchants or authorised data subjects may contact admin@zendsms.com about App data. We may verify identity and authority before acting. We will revise the effective date when this policy is materially updated.