This policy explains what information SMSMaster.lk collects when you use our SMS gateway, API, and dashboard, how we use it, and the choices you have.
SMSMaster.lk ("we", "us", "our") provides a bulk SMS, OTP, and transactional messaging platform for businesses in Sri Lanka, including our website, dashboard, and developer API (together, the "Service").
This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, create an account, or use the Service. By using SMSMaster.lk, you agree to the practices described here. If you do not agree, please do not use the Service.
We collect information in a few different ways, depending on how you interact with us:
We use the information we collect to:
When you use SMSMaster.lk to send messages, you upload or provide recipient phone numbers and message content ("Campaign Data"). This data belongs to you as the sending business, and you are responsible for having the appropriate consent to message your recipients.
We process Campaign Data solely to route and deliver your messages, generate delivery reports, and provide the analytics shown in your dashboard. We do not sell Campaign Data or recipient phone numbers to third parties, and we do not use recipient data to send our own marketing messages.
We share information only in the following circumstances:
| Recipient | Purpose |
|---|---|
| Telecom operators & SMS aggregators | Routing and delivering messages to recipients |
| Payment processors | Processing subscription and top-up payments |
| Cloud & infrastructure providers | Hosting our platform, databases, and backups |
| Regulators & telecom authorities | Sender ID approval and compliance obligations |
| Legal & law enforcement | Where required to comply with applicable law |
We require these partners to protect your information and use it only for the purposes we specify. We do not sell personal information.
We retain account information for as long as your account remains active, and for a reasonable period afterward to meet legal, accounting, and regulatory obligations. Message logs and delivery reports are retained for the period required by telecom regulations and for your reporting needs, after which they are anonymized or securely deleted.
We use industry-standard safeguards to protect your information, including encryption in transit, access controls on our infrastructure, and regular monitoring for suspicious activity. API keys should be kept confidential — never expose them in client-side code or public repositories.
No method of transmission or storage is 100% secure. If you believe your account or API key has been compromised, please contact us immediately.
Depending on your location, you may have the right to:
To exercise any of these rights, contact us using the details below.
Our website and dashboard use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect some features of the dashboard.
Our infrastructure and service providers may process data outside Sri Lanka. Where this occurs, we take steps to ensure appropriate safeguards are in place to protect your information in accordance with this policy.
SMSMaster.lk is a business-to-business platform and is not directed at children. We do not knowingly collect personal information from individuals under 18 years of age.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page and revise the "Last updated" date above. Material changes will be communicated via email or a notice on the dashboard.
If you have questions about this Privacy Policy or how we handle your data, reach out to us:
We typically respond within 1–2 business days.