Privacy Policy

Last updated: August 4, 2026

1. Who we are

SMS Pulse is operated by DAX CAPITAL LLC, [Company Address] ("we", "us"). We provide automated SMS services to online merchants ("Merchants"). Contact: info@smspulse.io.

2. Two roles: controller and processor

This policy distinguishes two kinds of personal data:

• Merchant account data - data about the Merchant and its staff (account email, name, billing details, usage). For this data we are the controller.
• Merchant customer data - data about the Merchant's customers that the service processes to send messages (phone numbers, names, order details, uploaded contact lists, message and click events). For this data the Merchant is the controller and we act as the Merchant's processor / service provider, processing it only to provide the service and on the Merchant's instructions.

If you received an SMS from a store using SMS Pulse, that store is responsible for your data and for having your consent. Contact the store for questions or requests about your data, or use the opt-out link in the message to stop receiving texts from that store. We do not use merchant customer data for our own marketing and we never sell it.

3. Data we process

• Account data: email, name, password (stored hashed), billing details and tax information, payment card metadata (card brand and last four digits - full card numbers are handled by our payment processor and never touch our servers).
• Store data via the Shopify integration: orders, checkout events, customer names and phone numbers, product and shipping information needed for the flows the Merchant enables.
• Uploaded contact lists: phone numbers and names the Merchant uploads for campaigns.
• Messaging data: messages sent, timestamps, destination country, cost, link clicks, opt-outs, attributed orders.
• Technical data: logs, IP addresses and security events needed to operate and protect the service.

4. Why we process it

• To provide the service: sending the messages the Merchant configures, tracking clicks and attribution, showing analytics (performance of a contract / Merchant instructions).
• Billing, invoicing and fraud prevention (performance of a contract, legal obligation, legitimate interest).
• Support and service communications (legitimate interest / contract).
• Security, abuse prevention and compliance with law (legitimate interest, legal obligation).

We do not sell personal data and we do not use merchant customer data for advertising.

5. Sharing and subprocessors

We share data only with providers needed to run the service, bound by contract to protect it:

• Cloud hosting and database providers.
• SMS gateways and telecommunications carriers (they receive the destination number and message content in order to deliver it).
• Payment processing (Stripe) for top-ups and campaign payments.
• Platform APIs the Merchant connects (Shopify; shipment tracking providers such as ParcelPanel).
• Authorities, when required by law.

6. International transfers

We are a U.S. company and use providers in the United States and the European Union. Where personal data of EU/EEA or UK individuals is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Retention

We keep account data for as long as the account exists and as needed for legal and accounting obligations afterwards. Merchant customer data is kept while the Merchant's account is active, because the service's suppression lists (opt-outs), attribution and analytics depend on history; Merchants can request deletion of their store's data when closing the account, subject to what we must keep by law.

8. Your rights

• EU/EEA and UK (GDPR): you may have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority. For merchant customer data, exercise these rights with the Merchant (the controller); we will assist the Merchant as its processor.
• U.S. state privacy laws: depending on your state, you may have rights to know, delete and correct personal information and to opt out of its sale or sharing. We do not sell personal information.
• SMS recipients: every marketing message sent through the service includes an opt-out mechanism; opting out is permanent for that store and honored automatically.

To exercise rights over account data, write to info@smspulse.io. We may need to verify your identity.

9. Security

We protect data with measures appropriate to the risk, including encryption in transit, encryption at rest for sensitive credentials, access controls and audit logging. No system is perfectly secure; if a breach affecting personal data occurs, we will notify affected parties as required by law.

10. Children

The service is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

11. Changes

We may update this policy; the current version is always at smspulse.io/privacy with its date above. Material changes will be notified in the product or by email.

12. Contact

DAX CAPITAL LLC, [Company Address] - info@smspulse.io.