Privacy Policy

Effective Date: May 1, 2026

SyndicateSMS LLC ("SyndicateSMS," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have regarding your information when you use our platform at syndicatesms.com (the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect several categories of information to operate and improve the Service:

1.1 Account Information

When you register for an account, we collect information such as your name, business name, email address, phone number, and password. If you represent a company, we may also collect your company's address and other business details needed for 10DLC registration and compliance purposes.

1.2 Payment Information

We use Square as our payment processor. When you subscribe to a plan or make a purchase, your payment card details are entered directly into Square's secure payment interface and are processed and stored by Square. SyndicateSMS does not store your full credit card number, CVV, or other sensitive payment card data on our servers. We may receive limited non-sensitive billing information from Square, such as the last four digits of your card, card type, and transaction confirmation numbers, solely for account management and customer support purposes.

1.3 SMS Logs and Campaign Data

In order to provide the Service, we collect and retain records related to your SMS campaigns, including message content you compose, send timestamps, delivery status, recipient phone numbers from your uploaded contact lists, and inbound reply messages. This data is used to display campaign analytics, facilitate AI auto-replies, and maintain compliance records.

1.4 Contact Lists

When you upload contact lists to the Service, we receive and store the information contained in those lists (such as phone numbers and any associated names or custom fields) on your behalf. See Section 4 (SMS Data and Contact Lists) for more detail on how this data is handled.

1.5 Usage and Technical Data

We automatically collect certain technical and behavioral data when you use the Service, including:

• IP address and approximate geographic location;
• Browser type and version, device type, and operating system;
• Pages and features you access, and the dates and times of your visits;
• Referring URLs and session activity; and
• Error logs and diagnostic data.

This data is collected using standard web technologies such as cookies, web beacons, and server logs. You may control cookie preferences through your browser settings, though disabling certain cookies may affect Service functionality.

1.6 Communications with Us

If you contact our support team or send us an email, we retain the content of those communications along with your contact information in order to respond to your inquiries and improve our support.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate, maintain, and deliver all features of the platform, including SMS campaign delivery, AI auto-reply functionality, and appointment scheduling.
• Account Management: To create and manage your account, verify your identity, and communicate with you about your account.
• Billing and Payments: To process subscription payments and manage billing through Square, and to maintain transaction records.
• Compliance and Regulatory Purposes: To facilitate 10DLC registration, maintain required SMS compliance records, and respond to legal obligations or regulatory inquiries.
• Service Communications: To send you transactional notifications, such as account confirmations, billing receipts, and security alerts. These communications are necessary for the operation of your account.
• Product Updates and Marketing: To send you information about new features, promotions, or updates related to the Service, where you have not opted out. You may unsubscribe from marketing communications at any time.
• Analytics and Improvement: To analyze usage patterns, diagnose technical issues, and improve the performance, reliability, and features of the Service.
• Safety and Fraud Prevention: To detect, investigate, and prevent unauthorized access, abuse, spam, and other activities that violate our Terms of Service or applicable law.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share information only in the following limited circumstances:

3.1 Service Providers and Subprocessors

We share information with trusted third-party service providers who process data on our behalf to help us deliver the Service. These providers are bound by contractual obligations to protect your data and may only use it as directed by us. Our key subprocessors include:

• Square — Processes subscription payments and billing transactions. Square's privacy practices are governed by Square's Privacy Policy.
• Telnyx — Provides the telecommunications infrastructure used to send and receive SMS messages on your behalf. Message content and recipient data are transmitted to Telnyx solely for the purpose of message delivery.
• Amazon Web Services (AWS) — Provides cloud hosting, storage, and infrastructure for the Service. Data stored on AWS is subject to our security controls and AWS's compliance certifications.

3.2 Legal Requirements

We may disclose your information if we believe in good faith that doing so is necessary to: (a) comply with a legal obligation, court order, or government request; (b) enforce our Terms of Service; (c) protect the rights, property, or safety of SyndicateSMS, our users, or the public; or (d) detect, prevent, or address fraud, security, or technical issues.

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information with other third parties when we have your explicit consent to do so.

4. SMS Data and Contact Lists

SyndicateSMS operates as a data processor with respect to the contact information you upload to the platform. You, the User, are the data controller for the personal information of your contacts. This means:

• You own your contact data. SyndicateSMS does not claim ownership of any contact lists or personal information belonging to your contacts.
• You are responsible for ensuring you have lawful authority to upload and message the individuals on your contact lists, including obtaining all required opt-in consents under applicable law (including the TCPA).
• We process contact data only as necessary to deliver the SMS communications you initiate and to maintain required logs.
• We will not use your contacts' personal information for our own independent marketing or commercial purposes.

If a contact of yours submits a request to SyndicateSMS regarding their data (for example, a deletion request), we will direct them to you as the responsible party and assist you in fulfilling the request where technically feasible.

5. Data Retention

We retain your account information and associated data for as long as your account remains active and for a reasonable period thereafter to allow for account recovery, dispute resolution, and legal compliance. Specifically:

• Account data is retained for the duration of your subscription and for up to 90 days after account closure, after which it is deleted or anonymized unless we are required to retain it longer by law.
• SMS logs and campaign data may be retained for up to 24 months for compliance and analytics purposes.
• Billing records are retained for as long as required by applicable tax and financial regulations, typically 7 years.
• Contact list data is deleted within 90 days of account closure unless you request earlier deletion.

You may request deletion of your data at any time (see Section 7 — User Rights).

6. Data Security

We take the security of your information seriously and implement industry-standard technical and organizational measures to protect it against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security);
• Encryption of sensitive data at rest;
• Access controls and authentication requirements limiting data access to authorized personnel;
• Regular security reviews and vulnerability assessments; and
• Hosting on AWS, which maintains industry-leading physical and network security controls.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update or correct inaccurate information directly in your account settings or by contacting us.
• Deletion: You may request that we delete your personal information. We will fulfill such requests subject to our legal obligations to retain certain data (such as billing records).
• Data Portability: Where applicable, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Opt-Out of Marketing: You may unsubscribe from promotional emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly. Note that transactional communications necessary to the operation of your account are not subject to opt-out.
• Cookie Preferences: You may adjust your browser settings to decline cookies. Some features of the Service may not function properly without cookies.

To exercise any of these rights, please contact us at solutionsbysyndicate@gmail.com. We will respond to your request within a reasonable timeframe, and in any case within the period required by applicable law. We may need to verify your identity before fulfilling your request.

8. Children's Privacy

The Service is intended exclusively for business use by individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information from our records.

If you believe a minor has provided us with personal information, please contact us at solutionsbysyndicate@gmail.com so we can address it promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Effective Date" at the top of this page. For material changes, we will provide advance notice via email or a prominent notice within the Service at least 14 days before the changes take effect.

Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, please stop using the Service and close your account.

10. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at: