Standards for customer data protection, recipient privacy, and telecommunication log security.
Official Platform Policy
Governed under the commercial, electronic transaction, and telecommunications laws of the Democratic Socialist Republic of Sri Lanka. Last updated October 2026.
We collect information necessary to manage accounts and provide telecommunications services, including: organization name, business registration details, contact person name, email address, phone number, billing information, and bank deposit receipts. We also collect technical data including IP addresses, access logs, and API authentication events.
Phone numbers uploaded via contact books, CSV spreadsheets, or developer API requests are processed strictly for the technical routing, queuing, and delivery of SMS communications. Recipient data is treated as strictly confidential.
SMSGenix does not sell, rent, lease, monetize, or disclose customer recipient lists, phone numbers, or message contents to any third-party advertisers, data brokers, or marketing networks. Customer recipient contact data is never shared across tenant organisations.
We employ industry-standard security measures including TLS 1.3 encryption in transit and AES-256 encryption at rest. API secret tokens are securely hashed. High-security environments may configure message masking to redact sensitive verification codes (OTPs) and sensitive text from dashboard displays.
Message transmission records and delivery receipts are maintained according to customer project retention settings and regulatory audit mandates. Financial deposit records, bundle purchases, and wallet transactions are permanently stored in immutable ledgers to ensure commercial transparency.
We use essential cookies and local tokens solely for user session authentication, security verification, and interface language preferences. We do not use third-party tracking cookies or advertising pixels.
SMSGenix operates in compliance with the Personal Data Protection Act (PDPA), No. 9 of 2022 of Sri Lanka. Registered users have the right to review, update, or request the deletion of their personal contact details by contacting our data protection officer.
For privacy inquiries, data protection requests, or security disclosures, please contact privacy@smsgenix.net.
Our compliance and billing desk is available to assist your organisation.