RouteFlow SMS Privacy Policy

At XProduct Labs, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use RouteFlow SMS (the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Effective Date" of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy, and you waive the right to receive specific notice of each such change or modification.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you register for the Service, express an interest in obtaining information about us or our products and services, or otherwise contact us. The personal information we collect may include:

• Name and contact information (email address, phone number, physical address)
• Business information (company name, role, business address)
• Account credentials (username, password)
• Payment information (credit card details, billing address)
• Communication preferences

Message Content

When you use RouteFlow SMS to send and receive messages, we collect and store:

• Message content (text, images, videos, and other media)
• Message metadata (sender, recipient, timestamp, delivery status)
• Contact information for message recipients

Usage Information

We automatically collect certain information when you access and use the Service, including:

• Device information (IP address, browser type, operating system)
• Usage data (features used, time spent, interactions)
• Log data (access times, pages viewed, app crashes)
• Location information (approximate location based on IP address)

Cookies and Tracking Technologies

We use cookies, web beacons, and other tracking technologies to collect information about your browsing activities. You can control cookie settings through your browser preferences. However, disabling cookies may limit your ability to use certain features of the Service.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing the Service: To create and manage your account, process transactions, and deliver the messaging services you request
• Communication: To send you administrative messages, service updates, security alerts, and support messages
• Personalization: To understand your preferences and customize your experience
• Improvement: To analyze usage patterns, troubleshoot issues, and improve our Service
• Security: To protect against fraud, unauthorized access, and other security threats
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Marketing: To send you promotional communications about features, updates, and offers (you can opt out at any time)

3. How We Share Your Information

We may share your information in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment processors (Stripe)
• Cloud hosting providers
• Analytics providers
• Customer support tools
• Telecommunications carriers (for message delivery)

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government requests).

With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

Message Recipients

When you send messages through our Service, we transmit your messages to the intended recipients. The content and metadata of those messages may be stored by telecommunications carriers and recipient devices.

We do not sell your personal information to third parties.

Text Messaging Consent (Opt-In) Information

We do not share text messaging consent (opt-in) information with third parties. Your opt-in status and consent records are kept confidential and are only used for the purpose of managing your messaging preferences and ensuring compliance with applicable telecommunications regulations. This information is not sold, rented, or shared with third parties for marketing or any other purposes.

4. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.3
• Encryption of data at rest using AES-256
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

• Account Information: Retained while your account is active and for up to 90 days after account closure
• Message Content: Retained according to your account settings or until you delete them
• Transaction Records: Retained for at least 7 years for accounting and legal compliance
• Usage Data: Retained for up to 2 years for analytics and improvement purposes

You can request deletion of your data at any time by contacting us at hello@xproductlabs.com.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You have the right to access the personal information we hold about you and to receive it in a portable format.

Correction

You have the right to correct inaccurate or incomplete personal information.

Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions.

Objection and Restriction

You have the right to object to or restrict certain types of processing of your personal information.

Opt-Out

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of your information (we do not sell personal information).

To exercise any of these rights, please contact us at hello@xproductlabs.com. We will respond to your request within 30 days.

7. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete that information.

8. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from your country of residence.

If you are located in the European Economic Area (EEA) or United Kingdom, we rely on appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission.

9. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

10. Do Not Track Signals

Some browsers support "Do Not Track" (DNT) signals. Currently, our Service does not respond to DNT signals, as there is no industry standard for how to respond to them.

11. Analytics and Advertising

We may use third-party analytics services (such as Google Analytics) to help us understand how users interact with the Service. These services may collect information about your use of the Service and other websites.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date."

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

14. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), this section applies to you.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: To provide the Service and fulfill our contractual obligations
• Consent: When you have given explicit consent for specific processing activities
• Legitimate Interests: To improve our Service, prevent fraud, and ensure security
• Legal Obligations: To comply with applicable laws and regulations

Data Protection Officer

You can contact our Data Protection Officer at hello@xproductlabs.com for any questions about how we process your personal information.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.