How ZendSMS protects and uses information.

Who we are and when this policy applies

ZendSMS is a business messaging brand operated by Diana Host Limited under BTRC A2P Enlistment No. BTRC-A2P-23-144. This policy applies when you visit our website, request a quotation, open or use an account, integrate our API, contact support or receive a message processed through ZendSMS.

Our role and the customer’s role

For business account and website data, Diana Host Limited determines why the information is used. For recipient numbers, message content and campaign instructions supplied by a business customer, ZendSMS generally processes information to provide that customer’s requested A2P service. The customer remains responsible for its recipient list, lawful authority, notice and consent.

Account, business and verification data

We may collect the information needed to identify and serve a business and its authorised users.

• Name, business name, address, email and phone number
• Trade licence, incorporation, tax or other KYC and authorisation records where required
• Quotation, contract, invoice, payment and account-balance information
• Support requests, instructions, approvals and communication records

Messaging and routing data

When a customer submits an SMS request, we may process data required to route, secure and report it.

• Destination mobile number and available operator or MNP routing information
• Message body or template, sender ID and message category
• Request time, account reference, API log, route, segment count and delivery report
• Fraud, suppression, opt-out, rejection and troubleshooting signals

Website and technical data

Our systems may record IP address, browser and device details, cookie or local-storage preferences, pages requested, timestamps, security events and diagnostic logs. We use essential storage to operate the site, remember light or dark theme and protect the service.

Why we use information

We use information to verify customers, respond to enquiries, provide and bill for the service, submit messages, return delivery status, operate APIs and webhooks, provide support, prevent spam and fraud, enforce service rules, protect networks and comply with BTRC, mobile-operator, accounting and other lawful requirements.

Who receives information

We disclose only what is reasonably necessary to mobile-network operators, MNP or routing providers, approved A2P or technology providers, hosting and security vendors, payment and professional advisers, and public authorities where lawfully required. We do not sell personal information or recipient lists for another party’s independent marketing.

Retention and security

We keep each category only as long as reasonably needed for messaging, billing, audit, security, dispute and legal purposes. Retention can differ by record and regulatory requirement. We use access controls, monitoring, backups and other reasonable safeguards, but no internet or telecom system can be guaranteed completely secure.

Recipient choices and privacy requests

A recipient should first contact the business identified as the sender because that business controls the purpose and content of the message. For promotional messages, customers must honour applicable opt-out and DND requirements. You may ask us to access, correct or delete eligible information by emailing support@zendsms.com; we may verify identity and retain records that must lawfully remain.

International processing, updates and contact

Some supporting technology may process data outside Bangladesh subject to appropriate contractual and security controls. We may update this policy when services or requirements change and will revise the effective date for a material update. Privacy questions may be sent to support@zendsms.com.