Privacy Policy

Last updated: January 2025

1. Who We Are

SMSTunnel is a service provided by NARBOWEB SRL, a company registered in Romania.

  • Company: NARBOWEB SRL
  • Email: contact@smstunnel.io
  • Website: https://smstunnel.io

2. What Data We Collect

We collect the following types of data:

  • Account Information: Email address, name, phone number (optional)
  • Device Information: Device name, Android version, app version
  • Usage Data: SMS sent count, API calls, login times
  • Message Content and Metadata: The messages you send through the service — and, only if you enable "Sync received SMS" in the app, the messages you receive — are stored in your account (number, text, time, delivery status) so you can view and manage them in your dashboard. With optional end-to-end encryption, we store only ciphertext that we cannot read.
  • Payment Information: Processed securely by Stripe

3. Mobile App Permissions

Our Android app requires the following permissions:

  • Send SMS: To deliver the messages you composed on your other devices (dashboard, your own software) via your phone's SIM card
  • Receive SMS (optional, off by default): Only if you enable "Sync received SMS" in the app's settings, new incoming messages are relayed to your own account so you can read and answer them from your other devices. The app never reads your existing SMS inbox or conversations, and you can turn syncing off at any time with immediate effect
  • Camera: To scan QR codes for device pairing and configuration only
  • Phone: To detect SIM card information for dual-SIM support
  • Internet: To communicate with our servers
  • Notifications: To show background service status

Note: Camera is used exclusively for QR code scanning. We do not capture, store, or transmit any photos or videos.

4. How We Use Your Data

We use your data to:

  • Provide and maintain our service
  • Process your transactions
  • Send you service-related communications
  • Improve our products and services
  • Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit using TLS 1.3
  • Passwords are hashed using bcrypt
  • SMS messages can be end-to-end encrypted (Pro plan) — in that case we store only ciphertext we cannot read
  • Your message history belongs to you: deleting your account permanently removes it, and you can request deletion at any time at privacy@smstunnel.io

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we're required by law to retain it.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Export your data in a standard format
  • Object: Object to certain processing activities

To exercise these rights, contact us at privacy@smstunnel.io.

7. Third-Party Services

We use the following third-party services:

  • Stripe: Payment processing
  • Google Analytics: Website analytics (optional)
  • MongoDB Atlas: Database hosting

8. Cookies

We use cookies to maintain your session and preferences. See our Cookie Policy for more details.

9. Data Deletion

To request deletion of your data:

  1. Log into your account and go to Settings
  2. Click "Delete Account"
  3. Or email us at privacy@smstunnel.io

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through our service.

11. Contact Us

If you have questions about this privacy policy, please contact us: