Privacy Policy
Last updated: July 28, 2026
SMS Gateway is built and operated by Tech And Graphics (“we”, “us”) for sending, tracking, and managing SMS messages on behalf of our clients. This policy explains what data the platform processes, why, and how it is protected.
1. Who this applies to
This policy covers two groups: authorized administrators and staff who sign in to the dashboard or use its API (“users”), and the phone numbers messages are sent to (“recipients”). Access to the dashboard is provisioned by an administrator — there is no public sign-up.
2. Information we collect
- Account identity — name, username, and email, managed through our identity provider (Keycloak).
- Message data — recipient phone numbers, message content, sender IDs, delivery status, and timestamps.
- Billing data — credits, per-sender costs, and balance history.
- API tokens — opaque credentials issued to integrator systems, scoped to specific senders.
- Audit and session data — sign-in activity and administrative actions, kept for accountability.
3. How we use this information
We use this data to deliver and track SMS messages, maintain accurate billing, secure access to the platform, investigate misuse, and improve reliability. We do not use message content or recipient numbers for advertising, and we do not sell personal data to third parties.
4. Who we share it with
Messages are transmitted through an upstream SMS delivery provider solely to complete delivery. Account authentication is handled by our Keycloak identity server. We do not share message content, recipient numbers, or account data with any other third party except where required by law.
5. Data retention
Message, billing, and audit records are retained for as long as needed for delivery reporting, billing reconciliation, and legal or regulatory compliance. Administrators can request deletion of their own account data, subject to what we are required to retain for audit purposes.
6. Security
Administrative access requires authentication through Keycloak; API access requires a scoped, revocable token. Traffic is encrypted in transit, sensitive endpoints are rate-limited, and administrative actions are logged. No method of transmission or storage is perfectly secure, but we work to protect data against unauthorized access, alteration, or loss.
7. Cookies
The dashboard uses a single session cookie to keep you signed in and a local preference for light/dark theme. We do not use third-party advertising or analytics cookies.
8. Message recipients
If you received an SMS sent through this platform, that message was sent by one of our clients, who is responsible for the content and for having a valid basis to contact you. Please reach out to that organization directly for requests regarding your phone number or message history.
9. Your rights
Administrators may request access to, correction of, or deletion of their personal account data by contacting us at the email below. We will respond within a reasonable time and may need to verify your identity before acting on a request.
10. Changes to this policy
We may update this policy as the platform evolves. Material changes will be reflected by updating the date at the top of this page.
11. Contact us
Tech And Graphics — Lilongwe, Area 18, Malawi
Email: info@tag.mw
Phone: +265 993 563 408