At startupSMS, we treat your data as infrastructure. Learn how we collect, protect, and process information within our Azure-encrypted nodes.
Last Updated: August 01, 2026
We collect minimal data required to provide industrial-grade SMS services. This includes account identifiers, API authentication keys, and metadata required for routing. We do not store the content of messages beyond the transient window required for carrier delivery.
Data is primarily used to facilitate the transmission of messages through Tier-1 carriers. We analyze traffic patterns to optimize routing logic and prevent fraudulent activity (spam) that could damage our sender reputation and your delivery rates.
In accordance with TRAI regulations, startupSMS acts as a conduit for DLT scrubbing. We share Template IDs and PEIDs with blockchain registries to verify compliance. This data is handled via encrypted VPN tunnels directly to registry nodes.
All data rests on Microsoft Azure’s AES-256 encrypted storage. Access to production environments is strictly limited via hardware security keys and IP whitelisting. We undergo regular ISO 27001 audits to ensure your infrastructure remains sovereign.
Under GDPR and local laws, you have the right to export, modify, or delete your account information at any time. API logs are retained for 90 days for troubleshooting purposes, after which they are permanently purged from our active clusters.
Our Data Protection Officer (DPO) is available to discuss your technical security requirements.