SMSFLOW.COM.AU PTY LTD
ABN: 83 687 813 798
South Australia, Australia
Last updated: 8th July 2026
PRIVACY NOTICE
This Privacy Notice for SMSFLOW.COM.AU PTY LTD ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services (the "Services"), including when you:
Questions or concerns?
Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed (except where we act as a data processor — see below). If you do not agree with our policies and practices, please do not use our Services.
This summary provides key points from our Privacy Notice. You can find more details by using the table of contents below.
What personal information do we process?
We collect personal information that you provide to us when you register for an account (name, email, phone, business details) and automatically when you use the Services (IP address, device and usage information). When you upload contact lists for SMS campaigns, we process that information only as a data processor on your behalf and never for our own purposes. Learn more
Do we process any sensitive personal information?
We do not process sensitive personal information (such as health, racial or ethnic origin, or religious beliefs).
How do we process your information?
We process your information to provide and improve our SMS platform and Services, communicate with you, process payments, ensure security and prevent fraud, comply with legal obligations (including the Spam Act 2003 and ACMA requirements), and for analytics. We only process information when we have a valid legal reason to do so. Learn more
When and with whom do we share personal information?
We share information with service providers who help us operate the business (telco/SMS delivery partners, payment processors such as Stripe, analytics providers, and hosting providers). We do not sell your personal information. Learn more
Is your information transferred internationally?
Most of your personal information is stored and processed in Australia. Limited analytics data (including possible session replays) may be processed by providers located in the United States. Learn more
How long do we keep your information?
We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. This generally means we keep information while your account is active and for a reasonable period afterwards, unless you request deletion earlier (subject to legal requirements). Learn more
What are your rights?
Under the Australian Privacy Principles (APPs), you have rights to access, correct, and in some cases delete your personal information, as well as to make a privacy complaint. Learn more
How do you exercise your rights?
The easiest way is to contact us at [email protected]. We will respond in accordance with applicable privacy laws.
In Short: We collect personal information that you voluntarily provide to us when you register for an account or contact us.
We collect personal information that you provide when you:
Types of information we collect include:
All personal information you provide to us must be true, complete, and accurate. You must notify us of any changes.
In Short: Some information (such as your IP address, browser and device characteristics, and usage data) is collected automatically when you visit or use our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not always reveal your specific identity but may include:
We also collect information through cookies and similar tracking technologies (see section 4).
In Short: We process your information to provide, improve, and administer our SMS platform and Services, communicate with you, process billing, ensure security and prevent fraud, and comply with law (including the Spam Act 2003). We may also process information for other purposes with your consent.
We process your personal information for the following purposes:
We only process personal information when we have a valid legal basis under the Australian Privacy Principles.
Important note on uploaded contact lists
When you use our platform to send SMS campaigns, any personal information in your contact lists is processed by us only as a data processor acting on your instructions. We do not determine the purposes or means of processing that data and do not use it for our own purposes. You remain responsible for ensuring you have appropriate consent or other lawful basis to contact those recipients and for complying with the Spam Act 2003 and Privacy Act.
In Short: We may share information in specific situations and with specific categories of third parties that help us operate our business. We do not sell your personal information.
We may need to share your personal information in the following situations:
Service providers and processors — We share information with trusted third parties who perform services on our behalf, including:
These providers are contractually required to protect your information and use it only for the purposes we specify.
Business transfers — We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Legal and safety reasons — We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of SMSFLOW.COM.AU PTY LTD, our users, or the public.
With your consent — We may share information in other situations where you have given us explicit consent.
We require all third parties to whom we disclose personal information to respect the security of your data and to treat it in accordance with applicable privacy laws.
In Short: We use cookies and similar tracking technologies to collect and store information for analytics, performance monitoring, and to improve your experience.
We (and our service providers) use cookies, web beacons, pixels, and similar technologies when you interact with our Services. These technologies help us:
Analytics and error monitoring
We use third-party analytics services (including Google Analytics, PostHog, and Sentry) to understand usage patterns, diagnose technical issues, and improve the platform. These tools may collect information about your device, browser, and how you use the site.
You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Services.
We do not use tracking technologies to serve targeted advertising on our own behalf using data from your uploaded contact lists.
For more information about the specific cookies we use, please contact us at [email protected].
In Short: Most of your personal information is stored and processed in Australia. Limited analytics data may be processed overseas.
We are an Australian company and primarily store and process personal information on servers located in Australia (including our hosting infrastructure in Sydney).
However, some of our analytics and monitoring providers (such as PostHog and others) are based in the United States. These providers may process limited information, including device and usage data and, in the case of session replays, information that could include personal information.
Where personal information is transferred outside Australia, we take reasonable steps to ensure that the overseas recipient handles the information in a manner consistent with the Australian Privacy Principles (for example, through contractual safeguards or because the recipient is subject to a substantially similar privacy regime).
By using our Services, you consent to the transfer of your information to these overseas providers as described in this Notice.
In Short: We keep your personal information for as long as it is necessary to provide the Services and meet our legal obligations.
We retain personal information for the period necessary to:
This generally means we retain information while your account remains active. After account closure or upon your request, we will delete or de-identify your personal information, except where we are required or permitted by law to retain it for longer (for example, for audit, legal, or safety reasons).
Uploaded contact lists
You can delete individual contacts or entire lists through your account dashboard at any time. We will process deletion requests promptly. We do not retain uploaded contact data after it is no longer needed to deliver your campaigns, except where required for legal compliance or dispute resolution.
If you would like us to delete specific information earlier, please contact us at [email protected]. We will consider and action requests in accordance with the Australian Privacy Principles.
In Short: We do not knowingly collect personal information from children under 18 years of age.
Our Services are not directed to individuals under 18 years of age. We do not knowingly collect, use, or disclose personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] so we can take appropriate action.
In Short: Under the Australian Privacy Principles (APPs), you have certain rights regarding your personal information. We will honour these rights in accordance with the law.
Depending on your location and applicable law, you may have the following rights:
These rights are not absolute and may be subject to exceptions (for example, where we need to retain information for legal reasons or where deletion would affect another person’s rights).
Exercising your rights
To exercise any of these rights, please contact us using the details in the “How Can You Contact Us” section below. We will respond to your request within a reasonable time and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response.
Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.
At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As a result, we do not currently respond to DNT browser signals or other similar mechanisms. If a standard is adopted in the future, we will update this Privacy Notice accordingly.
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws and to reflect changes in our practices.
We may update this Privacy Notice from time to time. The “Last updated” date at the top of this page indicates when the latest changes were made.
When we make material changes, we will notify you by updating the date on this page and/or by posting a prominent notice on our website or within the platform. We encourage you to review this Privacy Notice periodically to stay informed about how we protect your information.
If you have questions, comments, or concerns about this Privacy Notice or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:
SMSFLOW.COM.AU PTY LTD
Email: [email protected]
ABN: 83 687 813 798
South Australia, Australia
We will respond to all legitimate requests in accordance with applicable privacy laws.
You have the right to request access to, correction of, or deletion of the personal information we hold about you.
For account information
You can review and update most of your account details directly in your SMSFlow dashboard.
For uploaded contact lists
You can manage, edit, and delete contacts and lists at any time through the platform.
For formal requests
To make a formal request to access, correct, or delete personal information (including data we hold as a processor), or to withdraw consent, please email us at [email protected] with sufficient information to identify you and the information you are requesting.
We will respond to your request within 30 days (or such longer period as permitted by law) and will advise you if we are unable to fulfil the request and the reasons why.
If you are not satisfied with our handling of your request, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Thank you for trusting SMSFlow with your communications.
This Privacy Notice is provided for transparency and to help you understand how we handle personal information. We are committed to protecting your privacy and complying with the Australian Privacy Principles and the Spam Act 2003.
This document was prepared as a draft for SMSFLOW.COM.AU PTY LTD. We recommend obtaining independent legal advice before publishing to ensure it fully reflects your current practices and complies with all applicable laws.