Privacy Policy

LundoSMS is operated by OXMET LIMITED ("we", "us"). This policy explains what personal data we handle when you visit this website or use the LundoSMS service, why we handle it and what choices you have.

Depending on how you use LundoSMS, we collect:

• Account details: your name, email address, phone number, business name, address and, where required, tax and registration details.
• Verification documents you upload, such as company registration papers or sender ID authorisation letters.
• Billing records: orders, payment references, amounts and receipts. We do not store card numbers; mobile money and bank payments are handled by payment providers.
• Message data: the text you send, recipient phone numbers, sender ID, delivery status and timestamps.
• Technical data: IP address, browser and device information, log-in history and API usage logs.
• Anything you write to us, for example through the contact form.

We use personal data to create and secure your account, send your messages and report delivery, process payments and issue receipts, review sender IDs, prevent abuse and fraud, support you, meet our legal obligations and improve the reliability of the service. We do not sell personal data.

When you send messages, you decide who receives them and what they say. You are responsible for having a lawful basis, and consent where it is required, for messaging your recipients. We process their phone numbers and message content on your behalf, only to deliver the messages and to report on them.

We share only what is needed, with:

• Mobile network operators and upstream SMS providers that carry your messages.
• Payment providers, such as AzamPay and banks, that process your payments.
• Email, hosting and infrastructure providers that help us run the service.
• Authorities, when the law requires it.

We require the providers we use to protect the data they handle.

This website does not use advertising or tracking cookies or third-party analytics, and it loads no third-party scripts or fonts. It remembers one preference in your browser: your colour theme. The dashboard at app.lundosms.co.tz uses its own session cookie to keep you signed in.

Message content is kept for a limited period — currently up to 90 days — and then redacted. Delivery records and billing records are kept longer, for accounting, audit and security. Account data is kept while your account is open and afterwards for as long as the law requires.

Data travels over encrypted connections (TLS). Passwords and API keys are stored hashed, privileged staff accounts use two-step sign-in, each organisation's data is kept separate from every other's, and access to sensitive actions is recorded.

You can ask us to give you a copy of your personal data, to correct it, to delete it, or to restrict or stop certain uses of it. We will answer within a reasonable time. If you are not satisfied, you can complain to the data protection authority in Tanzania.

We may update this policy and will say so on this page when we do. For questions or to use your rights, write to privacy@lundosms.co.tz.