Privacy Policy
Last updated September 2026
This policy explains how EasySms.ai ("EasySms", "we") processes personal data. It is written to meet the EU/UK General Data Protection Regulation (GDPR) and Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016).
1. Who we are
EasySms.ai, Doha, Qatar. Contact: privacy@easysms.ai. For account data we are the controller. For the contacts and messages our customers upload, the customer is the controller and we act as processor under our Data Processing Agreement.
2. Data we collect
- Account data: name, email, company, password (hashed), sign-in provider.
- Customer content: contacts, phone numbers, emails, conversation history, consent records.
- Technical data: IP address, device and browser info, security logs.
3. Why and on what legal basis
- Providing the service — performance of a contract (Art. 6(1)(b)).
- Security, fraud prevention, abuse and spam control — legitimate interests (Art. 6(1)(f)).
- Product update emails — consent (Art. 6(1)(a)), which you can withdraw at any time in Settings.
- Legal and tax records — legal obligation (Art. 6(1)(c)).
4. AI processing
When the AI agent is active, message content is processed by AI models to draft or send replies. Customer content is not used to train third-party models. Any conversation can be switched to human-only mode at any time.
5. Sharing and sub-processors
We share data only with sub-processors needed to run the service: cloud hosting and database, AI model providers, and messaging carriers (SMS, email, WhatsApp) once connected. We never sell personal data.
6. International transfers
Where data leaves the EEA/UK we rely on Standard Contractual Clauses or an adequacy decision.
7. Retention
Account data is kept while your account is active. When you delete your account, all associated data is erased immediately from the live database and from backups within 30 days.
8. Your rights
You can access, correct, export, restrict, object to, or delete your data. You can export or delete everything yourself from Settings → Privacy, or email privacy@easysms.ai. We respond within 30 days. You may complain to your local data protection authority.
9. Cookies
We use only strictly necessary storage to keep you signed in and remember your cookie notice choice. We do not use advertising or cross-site tracking cookies.
10. Security
Data is encrypted in transit and at rest, access is isolated per account, and passwords are checked against known breach lists.