BulkSMS is operated by Oasis Technologies Limited, registered in the United Republic of Tanzania. This policy explains what we collect, why, how long we keep it, and what your rights are.
1. What we collect
From you (the account holder)
| Data | Why |
|---|---|
| Phone number | Primary login identifier and channel for security notifications. |
| Email (optional) | Password recovery and billing notifications. |
| Organisation name | Identify your tenant in the dashboard and on invoices. |
| Password (hashed) | Authenticate logins. Stored as a bcrypt hash, never in plain text. |
| KYC documents | Regulatory compliance for sender-ID and SMS issuance. |
| Sender-ID documents | Verify that the alphanumeric name belongs to your business. |
| Payment metadata | Match top-ups to your account. We do not store full payment-card numbers. |
From your traffic (the messages you send)
| Data | Why |
|---|---|
| Recipient phone number | Required to deliver the message. |
| Message body | The content you asked us to send. Retained for audit and dispute resolution. |
| Delivery status & timing | Reporting and billing accuracy. |
Automatically
| Data | Why |
|---|---|
| IP address and user-agent | Abuse detection, security, audit log. |
| API access logs | Debug failed requests, enforce rate limits. |
| Admin audit log | Track every privileged action for compliance. |
2. How we use it
- Deliver your messages to the destination mobile network.
- Bill you accurately per actual segment delivered.
- Protect the platform from abuse, fraud, and regulatory violations.
- Improve the service with anonymised, aggregated analytics — never on individual messages.
- Comply with the law when required by a competent Tanzanian authority via a lawful order.
3. Who we share with
- Mobile network operators in Tanzania (Vodacom, Airtel, Tigo, Halotel, TTCL, Smile, Zantel) — only the minimum needed to deliver each message: sender ID, recipient number, message body.
- Our SMS gateway provider (MobiShastra) — same minimum data, under contract.
- Our payment provider (Snippe) — phone number and amount only, when you initiate a top-up.
- Authorities — only when compelled by a valid legal order, and only the specific data requested.
We do not sell your data, your recipients' data, or your message content to anyone, ever.
4. How long we keep it
| Data | Retention |
|---|---|
| Account profile | For the life of your account, plus 12 months after closure. |
| Message logs | Per your plan's log_retention_days setting (default 90 days). |
| API access logs | 30 days. |
| Audit log | 5 years (legal compliance). |
| KYC and sender-ID documents | For the life of the related approval, plus 24 months. |
5. How we protect it
- All passwords are bcrypt-hashed; we cannot recover them in plain text.
- KYC and sender-ID documents are AES-256-GCM encrypted at rest with per-file nonces.
- API keys can be scoped by permission and locked to specific IPs.
- Two-factor authentication is available for every account.
- Webhook deliveries from us are HMAC-SHA256-signed.
- All admin actions are written to a tamper-evident audit log with actor, IP, target, and timestamp.
6. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or out-of-date information from the dashboard or by writing to us.
- Export your message logs and contact data as CSV from the dashboard.
- Delete your account. Some records (audit log) are kept for the periods above for compliance reasons.
- Object to specific processing, where the law allows.
Send any request to hello@oasistech.co.tz. We respond within 30 days.
7. Cookies
We use first-party cookies (and a few localStorage keys) only for session tokens and remembering your sidebar preferences. We do not run third-party advertising or analytics that tracks individuals across sites.
8. Children
BulkSMS is not directed at people under 18. If we learn we've collected data from a child, we'll delete it promptly.
9. Changes
We'll update this page when something material changes and notify the account-owner phone or email on file. The "Last updated" date at the top reflects the most recent version.
10. Contact
Questions about your data? Write to hello@oasistech.co.tz.
44, Wema, Kipati, Mbagala,
Temeke, Dar Es Salaam.
P. O. Box 14713
+255 622 929 972 Zanzibar
Plot 504, House 26, Mombasa Rd,
Kwa Baakthiri, Kiembe Samaki,
Unguja, Zanzibar.
P. O. Box 85
+255 772 929 972