Privacy Policy
Last updated: 17 October 2026.
1. Who operates the service
MatchCopilot LLC (Georgia) operates SMS Workspace. Privacy inquiries: support@smsworkspace.com.
2. Information processed
When you register, we process your email address and a securely hashed password. The application stores contact names, phone numbers, consent flags, opt-out status, campaign content, submission history and encrypted SMS gateway credentials. Hosting systems may process technical and security logs.
3. Purposes
We use account information to provide and secure the service; campaign and contact information to perform actions you request; and technical logs to maintain service reliability and prevent abuse. We do not sell customer contact lists.
4. Customer contact data
For contacts uploaded by business users, those users determine the recipients and lawful purposes of processing. Depending on the circumstances, MatchCopilot LLC may act as a processor/service provider on their behalf. Customers must provide required notices and establish an appropriate legal basis for SMS communications.
5. Hosting and third parties
Application data is stored on the hosting infrastructure used for SMS Workspace. Gateway submissions are sent to the third-party SMS Gate service and through the customer’s mobile carrier. International data transfers and vendor-specific safeguards must be assessed before broader commercial rollout.
6. Security and retention
We use HTTPS, hashed account passwords, session controls and encryption for stored gateway secrets. No online service can guarantee absolute security. Information is retained as needed to operate accounts and meet applicable legal obligations; a detailed retention schedule is being finalized.
7. Your rights
Depending on applicable law, you may request access, correction, deletion or other privacy rights by contacting support@smsworkspace.com. You may also contact a competent data protection authority.
8. Cookies
The web console uses a session cookie for authentication. We do not currently intentionally deploy advertising or analytics cookies on the public site.
Before commercial launch: confirm the legal entity’s registered address, hosting provider and location, vendor agreements, data retention periods and any applicable international-transfer mechanism.