At Cloud SMS BD, your trust and your customers' confidentiality are our paramount responsibilities. We maintain military-grade encryption, zero third-party list sharing, and strict BTRC telecommunication compliance.
Effective & Last Updated: October 18, 2026 | ISO/IEC 27001 Aligned Data Standards
This Privacy Policy describes how Cloud SMS BD ("we", "our", or "us") collects, uses, safeguards, and handles customer data across our website (cloudsmsbd.com), customer portal, REST APIs, and carrier gateway interconnects in Bangladesh.
We act as a Data Processor on behalf of our enterprise and merchant clients (who act as the Data Controllers regarding their recipient lists), while serving as the Data Controller for our direct customer account records.
We collect only the information essential to administer your telecommunication services, prevent fraud, and satisfy statutory BTRC regulatory requirements:
Business title, Trade License copy, company pad authorization letters, contact person name, email address, mobile phone number, billing address, National Identity (NID) info and Tax Identification Number (e-TIN).
Originating IP addresses, API authentication tokens, HTTP request headers, browser user-agents, webhook delivery attempt logs, and session timestamps.
Your uploaded customer phone numbers (MSISDNs), recipient contact address books, contact group tags, and custom campaign merge parameters remain 100% your exclusive intellectual property. Under no circumstance does Cloud SMS BD mine, compile, or utilize your contact lists for third-party marketing or lead generation.
We process recipient telephone numbers and message bodies strictly for the technical purpose of:
Each client's database tables and recipient contact lists are partitioned with strict multi-tenant isolation. Account holders cannot view, access, or query contact lists belonging to other users.
We protect individual mobile consumers against unwanted communications through automated mechanisms linked to our Anti-Spam Policy:
As a telecom gateway operating in Bangladesh, Cloud SMS BD is subject to the regulatory oversight of the Bangladesh Telecommunication Regulatory Commission (BTRC) and relevant national security frameworks.
We will disclose customer account records, originating IP addresses, sender ID documentation, or message transmission logs only under the following strict legal conditions:
We do not participate in voluntary, informal data sharing with third-party corporations or advertising conglomerates.
Our data protection infrastructure employs industry-standard safeguards to protect data from unauthorized access, alteration, or interception:
All REST API calls, portal sessions, and webhook relays are secured via TLS 1.3 / HTTPS encryption.
Stored databases, credentials, and message records are encrypted utilizing industry-standard AES-256 algorithms.
Active SMS logs and delivery receipts are retained on active servers for ninety (90) days to allow customers to verify campaign performance, resolve billing queries, and monitor carrier deliverability. After 90 days, transactional payloads are automatically purged or archived into encrypted, cold storage in compliance with telecom audit requirements.
Our web platform uses essential first-party cookies and localized browser storage to ensure seamless operation:
Under our corporate privacy policy and prevailing data protection principles, you maintain the following rights regarding your account:
If you have inquiries regarding how your data is handled or wish to exercise your data rights, reach out to our privacy desk:
