Legal

Privacy policy

Last updated: 27 October 2026

This document is a draft pending legal review.

1. Who we are

BitSMS is an SMS gateway operated by BitCommerz, 1/1 NS Road (2nd Floor), Block A, Banasree, Dhaka 1219, Bangladesh. This policy explains what personal data we collect when you use the BitSMS website, dashboard and API, why we collect it, who we share it with and how long we keep it.

2. What we collect

Account details: your name, business name, email address, mobile number, password (stored only as a secure hash) and team members you invite.
Messages you send: the recipient phone numbers and message content you submit, the sender ID used, and OTP requests (we store only a hash of each OTP code, never the code itself).
Delivery data: which route carried each message, each attempt and its result, and delivery reports from operators.
Technical logs: API requests, IP addresses, browser information and security events such as sign-ins and API key changes.
Payment records: top-ups, amounts, payment references and invoices. Card or mobile-wallet details are handled by the payment gateway, not stored by us.
Enquiries: what you tell us when you fill in a contact or sales form, or write to support.

3. Why we use it

to provide the service: route and deliver your messages, report their status and verify OTPs;
to run your account: sign-in, verification, billing, balance and support;
to keep the service secure and prevent abuse such as spam, fraud and unauthorised use of API keys;
to meet legal, regulatory and accounting obligations in Bangladesh;
to answer enquiries you send us and, if you ask, contact you about BitSMS.

4. Recipients' data

When you send messages through BitSMS, the recipient numbers and message content belong to you, our customer. We process them on your behalf and only to deliver your messages, report on them and keep the service secure. You are responsible for having a lawful basis, including consent where needed, to message those people. If a recipient contacts us about a message, we may refer them to you.

5. Who we share it with

We do not sell personal data. We share it only as needed to run the service:

Upstream SMS providers and mobile operators, who receive the recipient number, sender ID and message content in order to deliver each message.
Our payment gateway, which processes your payments.
Cloudflare, which hosts our website and protects our service against attacks.
Authorities, where the law of Bangladesh requires us to disclose information.

6. How long we keep it

Message records: 13 months.
Delivery and attempt details (including raw delivery reports): 6 months.
Audit logs: 24 months.
Billing and payment records: as long as the law requires.
Account details: while your account is open, and afterwards only as long as needed for the purposes above.

When a retention period ends, the data is deleted or archived in a way that is no longer used for the service.

7. Security

All traffic to the website, dashboard and API is encrypted in transit (HTTPS).
Credentials we use to connect to SMS providers are stored encrypted.
Phone numbers are masked in our logs and audit records (for example +88017****1234). Full numbers are kept only where they are needed to send and track messages.
API keys are stored as hashes and shown to you only once, when created.

8. Cookies

We use only one strictly necessary cookie: a sign-in cookie on our API domain that keeps you logged in to the dashboard. We do not use advertising or tracking cookies, and we do not use third-party analytics.

9. Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. We will delete data unless we must keep it to meet a legal or accounting obligation, in which case we keep it only for the period required. Most account details can be updated directly in the dashboard. For anything else, write to us at the address below.

10. Changes to this policy

If we change this policy, we will update the date at the top of this page and tell account owners about important changes.

Contact us

BitSMS is a product of BitCommerz. If you have a question about this document, write to us or visit us:

Company: BitCommerz
Address: 1/1 NS Road (2nd Floor), Block A, Banasree, Dhaka 1219, Bangladesh
Email: support@bitcommerz.com
Phone: +880 1335-075410 (Sun – Thu, 9 AM – 6 PM)