SmartMsg Privacy Policy
Provider: Always Curious LLC, a Virginia limited liability company, doing business as SmartMsg (“SmartMsg,” “we,” “us,” or “our”) Website: https://smartmsg.io Version: 3.0 Effective date: 11/24/2021 Last updated: 9/11/2026
1. The short version
- SmartMsg is a business-to-business communications platform. Businesses (“Customers”) use our platform to send and receive SMS/MMS, voice calls, email, and web chat with their own customers and contacts. We call the people on the other end of those conversations “Recipients,” whether they receive a Customer’s message or start the conversation themselves by texting, calling, emailing, or chatting with the Customer through our platform.
- We do not sell personal information, and we do not share it for cross-context behavioral advertising. Mobile phone numbers and text-messaging opt-in data are never shared with third parties or affiliates for their marketing purposes.
- We wear two hats. For our Customers, website visitors, and prospects, we decide how and why data is processed (we are the “business” or “controller”). For Recipients of our Customers’ messages, we process data only on the Customer’s instructions (we are a “service provider” or “processor”). If you received a message from a business that uses SmartMsg, that business controls your data; Section 8 explains how to reach them and how to stop messages.
- We use vetted infrastructure providers, telecommunications carriers, a payment processor, and AI model providers to run the service. They are bound by contract to use data only to provide services to us.
- Our services are designed for and offered in the United States. We honor the privacy rights described in Section 11 for all U.S. residents, regardless of the state they live in.
- Questions or requests: [email protected] or the mailing address in Section 16.
2. Scope of this Policy
This Privacy Policy describes how SmartMsg collects, uses, discloses, and protects personal information when you:
- visit https://smartmsg.io or any site, page, or form that links to this Policy (the “Site“);
- create an account and use the SmartMsg platform, APIs, dashboards, integrations, and related services (the “Services“);
- communicate with us (sales, support, billing, or otherwise); or
- receive a message, call, email, or chat delivered through the Services on behalf of one of our Customers, or send one to a Customer through the Services.
This Policy does not apply to the practices of our Customers, telecommunications carriers, or other third parties whose services connect to ours. Each Customer is responsible for its own privacy notices and for having a lawful basis to contact its Recipients.
Capitalized terms not defined here have the meanings given in the SmartMsg Terms of Service.
3. Our two roles: business (controller) and service provider (processor)
| If you are… | SmartMsg’s role | What that means |
|---|---|---|
| A Customer, Authorized User, prospect, or Site visitor | Business / Controller | We decide how and why your personal information is processed, and this Policy governs it in full. |
| A Recipient — someone who receives a message, call, email, or chat sent through SmartMsg by a Customer, or who contacts a Customer through SmartMsg | Service provider / Processor | We process your information only to deliver, receive, route, store, and analyze communications on the Customer’s instructions and as permitted by our contract with the Customer and by law. The Customer is the business/controller. |
When we act as a service provider, we contractually commit to our Customers that we will not sell or share the personal information they entrust to us, will not use it for our own marketing, will not combine it with personal information from other sources except as permitted for service-provider purposes, and will process it only for the business purposes described in our agreement.
4. Information we collect
We collect information in three ways: directly from you, automatically when you use the Site or Services, and from third parties.
4.1 Information you provide to us
| Category | Examples | Who provides it |
|---|---|---|
| Account and identity data | Name, business email address, phone number, job title, company name, password (hashed), account preferences, profile photo (optional) | Customers and Authorized Users |
| Business verification and registration data | Legal entity name, EIN/tax ID, business address, website, industry, authorized representative name and contact details, stock symbol (if public), and other information required to register brands and campaigns with wireless carriers and registries (for example, 10DLC brand and campaign registration or toll-free verification) | Customers |
| Billing data | Billing contact, billing address, payment method type, last four digits and expiration of a payment card, transaction history, invoices, and tax information. Full payment card numbers are collected and stored by our payment processor (Stripe), not by SmartMsg. | Customers |
| Customer Content | The content of messages, emails, voice calls, call recordings, voicemails, transcriptions, chat sessions, templates, attachments/media, contact lists, Recipient phone numbers and email addresses, Recipient names and custom fields, preference and consent records, and any other data a Customer uploads to or generates through the Services | Customers (about their Recipients) |
| Communications with us | Support tickets, emails, chat transcripts, sales inquiries, demo requests, survey responses, feedback, and call recordings when we tell you a call is recorded | Anyone who contacts us |
| Event and marketing data | Webinar or event registrations, newsletter subscriptions, content downloads | Prospects and Customers |
4.2 Information collected automatically
| Category | Examples |
|---|---|
| Usage and telemetry data | Features used, pages viewed, actions taken in the dashboard, API endpoints called, request volumes, error logs, timestamps, referring URLs |
| Device and connection data | IP address, browser type and version, operating system, device identifiers, screen resolution, language settings, approximate location derived from IP address (city/region level) |
| Communications metadata | For each message, call, or email: sender and recipient identifiers (phone numbers, email addresses), timestamps, message segment counts, delivery status and error codes, carrier and route information, call duration, and similar “call detail record” data |
| Cookies and similar technologies | Session identifiers, authentication tokens, preference cookies, and analytics identifiers (see Section 6) |
| Security data | Login attempts, multi-factor authentication events, API key usage, anomaly and fraud signals |
4.3 Information from third parties
| Source | Information |
|---|---|
| Telecommunications carriers and messaging providers | Delivery receipts, carrier error codes, number lookup results (line type, carrier, porting status), spam/complaint reports, registration status |
| Payment processor | Payment confirmation, decline reasons, fraud risk scores |
| Identity, fraud-prevention, and business-verification services | Verification results for business registration and account security |
| Customer integrations | If a Customer connects a CRM or other system to SmartMsg, we receive the data the Customer chooses to sync (for example, contact records and conversation history) |
| Publicly available and business databases | Business contact and firmographic information used for sales outreach and verification |
| Referral partners and resellers | Contact and account information for Customers they refer |
4.4 Sensitive information
We do not ask Customers or visitors for sensitive personal information (such as Social Security numbers, precise geolocation, biometric identifiers, health information, or financial account credentials) and we ask you not to send it to us. Section 5.6 of the Terms of Service is the single rule on regulated and sensitive data in Customer Content: Customers may not transmit protected health information, payment card numbers, government identification numbers, passwords, or similarly regulated data through the Services unless the Documentation expressly permits it and any required agreement (such as a HIPAA Business Associate Agreement) has been signed. Where a Customer lawfully includes other sensitive information in Customer Content, we process it solely as a service provider on the Customer’s behalf.
5. How we use information
We use personal information for the following purposes:
Providing and operating the Services
- Creating and administering accounts and Authorized Users
- Transmitting, receiving, routing, queuing, storing, and displaying messages, calls, emails, and chats on Customers’ behalf
- Registering Customers’ brands, campaigns, phone numbers, and sending domains with carriers, registries, and mailbox providers as required for delivery
- Processing opt-in, opt-out (for example, STOP), and HELP requests and maintaining suppression lists
- Providing delivery reports, analytics dashboards, and real-time tracking
- Enabling Customer-configured integrations (for example, CRM synchronization)
AI-assisted features
- Performing sentiment analysis, intent classification, intelligent routing, summarization, template suggestions, and bot or virtual-agent responses on Customer Content, when the Customer enables those features
- We use these features only as instructed by the Customer. We do not use Customer Content to train AI models that serve other customers, and we contractually prohibit our AI providers from using Customer Content to train their models.
Billing and account management
- Metering usage, calculating charges, processing payments, issuing invoices, collecting amounts owed, and preventing payment fraud
Security, integrity, and compliance
- Authenticating users, detecting and preventing fraud, abuse, spam, unlawful content, and security incidents
- Monitoring traffic for compliance with our Acceptable Use & Messaging Policy, carrier requirements, and applicable law, including automated filtering of message content and metadata
- Responding to carrier audits, complaint investigations, and requests for proof of consent
- Complying with legal obligations, subpoenas, court orders, and regulatory requests, and establishing, exercising, or defending legal claims
Support and communications
- Responding to questions, support requests, and feedback
- Sending transactional and service messages (for example, account alerts, security notices, billing notices, policy updates, and low-balance alerts)
- Sending marketing communications about SmartMsg products and services to Customers and prospects, which you can opt out of at any time (Section 11.7)
Improvement and research
- Understanding how the Site and Services are used, diagnosing problems, developing new features, and measuring performance
- Creating aggregated or de-identified data that no longer identifies any individual. We commit to maintaining de-identified data in de-identified form, not attempting to re-identify it, and contractually prohibiting recipients of it from re-identifying it.
Business operations
- Auditing, accounting, corporate governance, insurance, and business transactions
We do not use personal information for automated decisions that produce legal or similarly significant effects about individuals. Sentiment analysis and intelligent routing operate on Customer Content at the Customer’s direction and do not, by themselves, make eligibility decisions about anyone.
6. Cookies and similar technologies
The Site and dashboard use cookies, local storage, and similar technologies.
| Type | Purpose | Examples |
|---|---|---|
| Strictly necessary | Sign-in, session management, security, load balancing, remembering your preferences | Session cookie, CSRF token, MFA remember-device cookie |
| Analytics | Understanding how visitors use the Site so we can improve it | Google Analytics |
| Functional | Live-chat widget, video embeds, support tools | None |
We do not use third-party advertising cookies or tracking pixels for cross-context behavioral advertising on the Site.
Your choices. Most browsers let you block or delete cookies through their settings; blocking strictly necessary cookies may prevent the dashboard from working. Where our analytics provider offers an opt-out.
Global Privacy Control (GPC) and Do Not Track. We treat a GPC signal from your browser as a valid request to opt out of any sale or sharing of your personal information and of targeted advertising, to the extent those activities occur. Because we do not sell or share personal information, a GPC signal will not change how the Site functions for you. We do not respond to “Do Not Track” signals because there is no industry standard for them.
7. How we share information
We share personal information only as described below. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. No mobile phone numbers, text-messaging originator opt-in data, or consent information will be shared with any third party or affiliate for marketing or promotional purposes.
7.1 Categories of recipients
| Recipient | Why we share | Examples |
|---|---|---|
| Telecommunications carriers, messaging aggregators, and CPaaS providers | To transmit and receive SMS/MMS, voice calls, and related traffic; to register brands, campaigns, and numbers; to investigate complaints | Twilio, Plivo, Bandwidth wireless carriers and their vendors; The Campaign Registry and toll-free verification providers |
| Email delivery providers | To send and receive email on Customers’ behalf and to manage bounces and complaints | Amazon SES, SendGrid, Resend |
| Cloud infrastructure providers | Hosting, storage, networking, content delivery, DDoS protection, backups | Amazon Web Services, Google Cloud Platform, Cloudflare |
| AI model providers | To power sentiment analysis, routing, summarization, and bot features when enabled by the Customer, under terms that prohibit training on Customer Content | OpenAI, Anthropic |
| Payment processor | To process payments and prevent payment fraud | Stripe |
| Analytics, monitoring, and support tooling | Product analytics, error monitoring, customer support, email delivery for our own notices | Google Analytics, Sentry, Nightwatch |
| Identity, fraud-prevention, and verification services | To verify businesses and prevent abuse | as engaged from time to time |
| Professional advisors | Lawyers, accountants, auditors, insurers, and consultants, under confidentiality obligations | — |
| Customer-directed recipients | When a Customer connects an integration or instructs us to transmit data to a third party | The Customer’s CRM, help desk, or other connected systems |
| Affiliates | Entities under common control with Always Curious LLC, for the purposes in this Policy | — |
We provide vendors only the information they need, require them by contract to protect it, and prohibit them from using it for their own purposes. A current list of the subprocessors that handle Customer Content is available on request.
7.2 Legal, safety, and compliance disclosures
We may disclose personal information when we believe in good faith that disclosure is necessary to:
- comply with a law, regulation, subpoena, court order, or other legal process, or a lawful request from a government authority, carrier, or industry registry;
- enforce our Terms of Service and Acceptable Use & Messaging Policy, including investigating potential violations;
- detect, prevent, or address fraud, spam, security incidents, or technical issues; or
- protect the rights, property, or safety of SmartMsg, our Customers, Recipients, or the public.
Where legally permitted and practicable, we will notify the affected Customer before disclosing Customer Content in response to legal process so the Customer can seek a protective order.
7.3 Business transfers
If SmartMsg or Always Curious LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal information may be transferred as part of that transaction, subject to this Policy or a policy that is at least as protective. We will notify Customers of any change in ownership or in how their personal information is used.
7.4 With your direction or consent
We share information when you ask us to (for example, when you request that we share a testimonial or connect a third-party service) or when you otherwise consent.
8. If you received a message from a business that uses SmartMsg
Businesses use SmartMsg to communicate with their own customers, patients, members, employees, and contacts. In that case:
- The business is responsible for your data, including for having your consent to contact you. SmartMsg processes your information only on that business’s instructions.
- To stop text messages, reply STOP to any message. You can also reply QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE, or tell the business through any other reasonable means. You will receive at most one confirmation message. Reply HELP for help.
- To stop emails, use the unsubscribe link in the email.
- To stop calls, follow the opt-out instructions provided during the call or tell the business you no longer wish to be called.
- To exercise privacy rights (access, deletion, correction, or others), contact the business that messaged you. If you contact us instead, we will tell you which business is responsible where we can, or forward your request to that business, and we may take reasonable steps to help the business respond.
- Suppression lists. When you opt out, we record your phone number or email address on a suppression list that applies to that business’s entire SmartMsg account — every number and campaign it uses — so its future messages of that type are blocked, unless you tell the business you only want to stop certain kinds of messages. We retain this record for as long as necessary to honor your request (at least ten years for text messages, in line with Virginia law).
If you believe a SmartMsg Customer is sending unlawful, abusive, or unwanted messages, report it to [email protected] with the sending number or email address, the date and time, and a copy of the message.
9. Data retention
We keep personal information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law. Retention periods depend on the type of data:
| Data | Retention |
|---|---|
| Account and identity data | Life of the account plus 90 days after closure, then deleted or de-identified, except as needed for the purposes below |
| Business verification and registration data | Life of the account plus 4 years, to satisfy carrier and registry audit requirements and applicable statutes of limitations |
| Billing and transaction records | 7 years to meet tax, accounting, and audit obligations |
| Customer Content — message bodies, media, email content, chat transcripts | The retention period configured by the Customer, subject to a default of 90 days and a maximum of 13 months; deleted or exported at account closure per the Terms of Service. |
| Customer Content — call recordings, voicemails, transcriptions | The retention period configured by the Customer, default 90 days |
| Communications metadata (delivery records, call detail records) | 18 months, to support billing, dispute resolution, carrier audits, and fraud prevention |
| Consent, opt-in, and opt-out records; suppression lists | Opt-out and suppression records: at least 10 years (Virginia requirement) and as long as needed to honor the request. Consent records: at least 5 years after the last message sent under that consent |
| Usage, telemetry, and security logs | 18 months |
| Support communications | 3 years after the ticket is closed |
| Marketing data | Until you unsubscribe or 24 months of inactivity, whichever is sooner |
| Backups | Encrypted backups are rotated on a 30-day cycle; deleted data ages out of backups within 60 days |
When retention ends, we delete or de-identify the data using provider-native secure deletion (cryptographic erasure where available). We may retain data longer when required to comply with a legal obligation, resolve disputes, enforce agreements, or respond to a litigation hold.
10. How we protect information
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, including:
- Encryption of data in transit using TLS 1.2 or higher, and encryption of data at rest using AES-256 or equivalent provider-managed encryption
- Role-based access controls, least-privilege access, multi-factor authentication for administrative access, and logging of administrative actions
- Network segmentation, private networking for internal services, firewalls, web application firewall, and DDoS mitigation
- Hashed passwords, API keys with scoped permissions, and support for multi-factor authentication on Customer accounts
- Vulnerability management, security monitoring, and an incident response process
- Vendor due diligence and contractual security obligations for subprocessors; our major infrastructure, carrier, and payment subprocessors maintain independent certifications such as SOC 2 Type II, ISO 27001, or PCI DSS
- Employee confidentiality obligations and security training
No system is perfectly secure. You are responsible for keeping your credentials and API keys confidential, enabling multi-factor authentication, and notifying us promptly at [email protected] if you suspect unauthorized access. If we determine that a security incident has affected personal information we hold as a business (for example, Customer account data), we will notify affected individuals and any regulators without undue delay and within the time required by applicable law, including Virginia’s data breach notification statute (Va. Code § 18.2-186.6) and the breach laws of other states. If an incident affects Customer Content, we will notify the affected Customer as provided in the Terms of Service so the Customer can meet its own notification obligations to its Recipients.
11. Your privacy rights
11.1 Rights we honor for all U.S. residents
Several states — including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — give residents rights over their personal information. Some of those laws may not apply to SmartMsg because of their thresholds, and several exclude information about people acting in a business or employment capacity. We nonetheless honor the following requests from any U.S. resident about personal information we hold as a business/controller, subject to verification and to the limits described below:
- Right to know / access. Confirm whether we process your personal information and receive a copy of it, including the categories collected, sources, purposes, and categories of third parties we disclosed it to.
- Right to correct. Correct inaccurate personal information.
- Right to delete. Delete personal information we collected from you, subject to exceptions (for example, to complete a transaction, comply with a legal obligation, detect security incidents, or exercise legal claims).
- Right to data portability. Receive your personal information in a portable, readily usable format.
- Right to opt out of sale, sharing, targeted advertising, and certain profiling. We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling in furtherance of decisions that produce legal or similarly significant effects. If that ever changes, we will update this Policy and provide an opt-out before doing so.
- Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes other than those permitted by law.
- Right to non-discrimination. We will not deny services, charge different prices, or provide a different level of service because you exercised a privacy right.
- Right to appeal. If we decline to act on your request, you may appeal (Section 11.4).
Requests about Recipient data. If your request concerns information we process as a service provider for a Customer, we will direct you to that Customer or forward your request to them (Section 8).
11.2 How to submit a request
- Email [email protected] with the subject line “Privacy Request”
- Use the request form at https://smartmsg.io/
- Customers can also access, correct, export, and delete much of their account data directly in the dashboard
- Mail: Always Curious LLC, Attn: Privacy, 2130 Alldever Dr, Maidens VA 23102
We will respond within 45 days, and may extend once by a further 45 days where reasonably necessary, in which case we will tell you why. We do not charge a fee unless requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline the request.
11.3 Verification and authorized agents
We must verify that you are the person the request concerns (or that person’s authorized agent). We typically verify by matching information you provide to information in our records, by sending a confirmation to the email address or phone number on file, or, for Customers, by requiring the request to come from a logged-in account administrator. An authorized agent may submit a request on your behalf if they provide signed written permission from you or a power of attorney; we may still ask you to verify your identity directly. We will only use the information provided in a request to verify and respond to it.
11.4 Appeals
If we deny all or part of your request, you may appeal within 45 days of our decision by replying to our response or emailing [email protected] with the subject “Privacy Appeal.” We will respond in writing within 45 days (which is within the period allowed by every state that provides an appeal right) explaining the reasons for our decision. If your appeal is denied, you may contact your state attorney general. Virginia residents can reach the Office of the Attorney General of Virginia at https://www.oag.state.va.us/ or by phone at 800-552-9963.
11.5 Additional disclosures for California residents
The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), requires the following disclosures for the preceding 12 months. This section serves as our Notice at Collection.
| Category of personal information (Cal. Civ. Code § 1798.140) | Collected? | Sources | Business purposes | Disclosed to (categories) | Sold or shared? | Retention (see Section 9) |
|---|---|---|---|---|---|---|
| Identifiers (name, email, phone, IP address, account ID) | Yes | You; automatic collection; carriers; integrations | Providing Services; security; billing; communications | Carriers and messaging providers; cloud providers; payment processor; analytics and support tools | No | Account identifiers: life of account + 90 days; IP/log identifiers: 18 months; identifiers in billing records: 7 years |
| Customer records (Cal. Civ. Code § 1798.80(e)) (billing address, payment card last four) | Yes | You; payment processor | Billing; account management | Payment processor; cloud providers | No | 7 years |
| Protected classification characteristics | No | — | — | — | No | — |
| Commercial information (purchase history, usage plans) | Yes | You; automatic collection | Billing; account management; improving Services | Payment processor; cloud providers | No | 7 years |
| Biometric information | No | — | — | — | No | — |
| Internet or network activity (usage, device, log data) | Yes | Automatic collection | Providing Services; security; analytics; improvement | Cloud providers; analytics and monitoring tools | No | 18 months |
| Geolocation data (approximate, from IP address) | Yes (approximate only) | Automatic collection | Security; fraud prevention; localization | Cloud providers; analytics tools | No | 18 months |
| Audio, electronic, visual, or similar information (call recordings, voicemails, support call recordings) | Yes | You; Customers on behalf of Recipients | Providing Services; support; quality | Carriers; cloud providers; AI providers (when enabled) | No | Support recordings: 3 years; recordings in Customer Content: Customer-configured, default 90 days |
| Professional or employment information (job title, company) | Yes | You; business databases | Account management; sales | Cloud providers; CRM and support tools | No | Life of account + 90 days; marketing data 24 months of inactivity |
| Education information | No | — | — | — | No | — |
| Inferences (product usage and preferences) | Limited | Derived from usage | Improving Services; support | Cloud providers; analytics tools | No | 18 months |
| Sensitive personal information (account credentials; content of communications where SmartMsg is not the intended recipient) | Yes (credentials; Customer Content processed as a service provider) | You; Customers | Authentication; providing Services | Cloud providers; carriers; AI providers (when enabled) | No | Credentials: life of account; Customer Content: Customer-configured, default 90 days, maximum 13 months |
- Recipient data held as a service provider. Rows that mention Customer Content are included for transparency; that information is collected by our Customers, and we process it only on their instructions as a service provider. The Customer, not SmartMsg, determines its retention within the limits we offer.
- Sale or sharing. We have not sold or shared personal information in the preceding 12 months and have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.
- Sensitive personal information. We use sensitive personal information only for the purposes permitted by Cal. Code Regs. tit. 11, § 7027(m), and therefore do not offer a “Limit the Use of My Sensitive Personal Information” link.
- Financial incentives. We do not offer financial incentives in exchange for personal information.
- Retention. Retention periods for each category are described in Section 9.
- Shine the Light. California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.
11.6 Additional disclosures for Nevada residents
We do not sell “covered information” as defined in Nevada Revised Statutes Chapter 603A. Nevada residents may nonetheless submit a request to opt out of any future sale to [email protected].
11.7 Marketing communications from SmartMsg
You can opt out of marketing emails by using the unsubscribe link in any marketing email, opt out of marketing text messages by replying STOP, and opt out of marketing calls by telling the caller or emailing [email protected]. We honor email unsubscribe requests within ten business days (usually immediately) and text opt-outs immediately. Opting out of marketing does not stop transactional and service messages, such as security codes, billing notices, and policy updates, which we send because they are necessary to operate your account.
12. Children’s privacy
The Site and Services are intended for businesses and their adult representatives. We do not knowingly collect personal information from anyone under 18, and no one under 13 may use the Services. Customers may not use the Services to collect personal information from children under 13 in violation of the Children’s Online Privacy Protection Act (COPPA) or to send communications to minors in violation of applicable law. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.
13. Third-party sites, integrations, and carrier practices
The Site and Services may link to or integrate with third-party websites, applications, and services (for example, CRM platforms, help desks, and analytics tools) that we do not control. Their privacy practices are governed by their own policies. Wireless carriers, mailbox providers, and internet service providers also process communications that transit their networks under their own terms and privacy policies, which we do not control.
14. Where we process data; notice to visitors outside the United States
SmartMsg is operated from the United States and stores and processes data in the United States. The Services are offered to businesses in the United States for communications with U.S. Recipients. If a Customer enables international routes for its account, the messages and calls it sends to Recipients outside the United States are transmitted to carriers in the destination country under that country’s laws. If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction. We do not currently offer the Services in the European Economic Area, the United Kingdom, or Switzerland, and we are not a participant in the EU-U.S. Data Privacy Framework.
15. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify Customers by email to the account owner and post a notice on the Site at least 30 days before the changes take effect, unless a shorter period is required by law or the change is needed to address a legal or security issue. The “Effective date” at the top shows when the current version took effect. Your continued use of the Site or Services after the effective date constitutes acceptance of the updated Policy. Prior versions are available on request.
16. Contact us
Always Curious LLC d/b/a SmartMsg Attn: Privacy 2130 Alldever Dr, Maidens, Virginia 23102 Privacy requests: [email protected] Abuse reports (unwanted or unlawful messages): [email protected] Security issues: [email protected] Website: https://smartmsg.io
If you have a disability and need this Policy in an alternative format, contact [email protected].