Privacy Notice

Effective Date: October 2026 • FLOW SYSTEMS Sp. z o.o.

Privacy by Default: FlowSMS collects only an email address and hashed password. We never ask for your identity documents, tax filings, or real name. Message contents and delivery records can be automatically purged at your command.

1. Information We Do NOT Collect

Unlike legacy aggregators, we operate on a strict data minimization architecture:

No Identity Documents: We never collect passports, driver's licenses, national ID cards, or selfie videos.
No Financial Records: We do not store credit card numbers, bank account numbers, or billing addresses. All settlement occurs directly on public blockchain networks.
No KYC or AML Bureaucracy: We provide technical telecommunication routing tunnels, not custodial financial accounts.

2. Information We Retain

To deliver service functionality, we store only:

Account Credentials: Your email address and a one-way bcrypt/argon2 password hash.
Wallet Balance: Current account balance and cryptographically verifiable transaction hashes.
Routing Telemetry: Timestamp, recipient number, sender ID, and carrier DLR delivery status codes necessary to confirm handset delivery.

3. Automated Data Purge & Zero Retention Option

You maintain full sovereignty over your messaging history. Inside your portal under Security Settings, you can configure automatic data retention rules:

Instant Wipe (0 Days): Messages are scrubbed immediately from database records upon delivery confirmation.
Configurable Window: Automatically purge all message logs older than 7, 30, or 90 days.
One-Click Wipe: Delete all stored contacts and transmission logs on demand.

4. Third-Party Sharing

We do not sell, rent, or trade your contact information or metadata with data brokers, advertisers, or third parties. Telecom payloads are transmitted strictly to upstream terminating mobile network operators (MNOs) solely to fulfill message dispatch.

5. Cookies & Local Storage

We use strictly necessary first-party session cookies (marked HttpOnly and SameSite=Lax) to keep you authenticated in your dashboard. We do not use third-party analytics trackers, pixel beacons, or behavioral advertising cookies.

6. Contact & Questions

For privacy inquiries or technical questions regarding cryptographic verification and routing security, reach out to our privacy engineers at /support.