Privacy Policy

1. Who is responsible for your data

HudumaSMS ("we", "us", "our") is responsible for the personal data described in this policy. For any question about it, or to exercise the rights in section 9, contact contact@hudumasms.com.

We handle personal data in two distinct ways, and your rights differ depending on which applies:

• As controller — for the data about you as our customer: your account details and how you use the platform. We decide how that data is used.
• As processor — for the contact lists and message content you upload. We hold and transmit that data on your instructions. If you are a recipient of a message sent through us, the sender is the controller of your data, not us; see section 8.

2. What we collect as controller

When you open and use an account, we store:

• Account details — your name, email address, phone number, and an optional separate email for notifications.
• Your password, stored only as a one-way hash. We cannot read it and cannot tell you what it is.
• Billing and usage records — credit purchases, credit balance, pricing tier, auto top-up settings and the phone number used for top-up payments.
• Sender IDs you register, and the supporting information you give us when applying for one.
• Technical records — sign-in events and server logs, including IP address, kept for security and troubleshooting.

3. What we process on your behalf

• Contacts you upload or create: phone number, and optionally name, email address, and country code, together with the groups you organise them into.
• Message content and delivery records: the text of each message, the recipient number, the sender ID used, timestamps, delivery status, and any failure reason returned by the network.

We keep message content because you need a sending history and because delivery status has to be reconciled against it. We do not read, mine, or sell your message content, and we do not use it to build profiles of your recipients.

4. Why we are allowed to hold it

• To perform our contract with you — running your account, sending your messages, taking payment.
• Legitimate interests — keeping the platform secure, preventing fraud and abuse, and improving the service.
• Legal obligation — where a regulator, network, or court lawfully requires us to retain or disclose records.

5. Who we share it with

• Delivery partners. To send a message we must pass the recipient number, the sender ID, and the message content to an SMS aggregator, which passes it to the mobile networks. This is unavoidable — it is how an SMS is delivered.
• Payment providers, to process credit purchases and mobile money top-ups.
• Regulators and law enforcement, where we are legally required to.

We do not sell personal data, and we do not share it for third-party marketing.

6. Where it is held

Platform data is held on servers we control. Some delivery and payment partners operate infrastructure outside Tanzania, so message data may be transmitted abroad in the course of delivering it.

7. How long we keep it

• Account and billing records — for as long as your account is open, and afterwards where we need them for tax, accounting, or legal reasons.
• Contacts — until you delete them or close your account.
• Message and delivery history — retained so you have a sending record; deleted with your account.

When you close your account we delete or anonymise your data, except where we must keep records to meet a legal obligation.

8. If you received a message from us

HudumaSMS is the delivery platform, not the sender. The organisation whose name appears as the sender ID chose to contact you and is responsible for that decision. To stop receiving messages, reply to the sender or contact them directly. If you cannot identify or reach them, write to contact@hudumasms.com with the sender ID and the date, and we will pass your request on and investigate whether our acceptable use rules were breached.

9. Your rights

Under the Personal Data Protection Act, 2022, you may ask us to give you a copy of your personal data, correct it if it is wrong, delete it, or restrict how we use it, and you may object to certain processing. Write to contact@hudumasms.com and we will respond within the period the law allows.

You may also complain to the Personal Data Protection Commission if you believe we have mishandled your data.

10. Cookies

This website sets no cookies and contains no advertising or analytics trackers. Fonts are served from our own servers, so visiting these pages does not report anything to a third party.

The customer dashboard at sms.huduma.cloud is different: it stores a session token in your browser to keep you signed in. That token is strictly necessary for the dashboard to work and is not used for tracking.

11. Security

Traffic to our sites is encrypted in transit. Passwords are stored only as hashes, access to production systems is restricted, and we keep audit logs of administrative actions. No system is perfectly secure, but if a breach affects your personal data we will notify you and the Commission as the law requires.

12. Changes

We will post any update here and change the date at the top. Where a change materially affects you, we will tell you by email or in the dashboard.