Privacy policy

Who is responsible

Shri Radha Technologies provides smsyra and decides how the data in it is handled. For the test texts your systems send us, you decide what goes in them; we keep them only to show them to you.

First: smsyra never delivers any message

Nothing sent to smsyra is passed on to a phone, a carrier or an SMS provider. It is kept for you to look at, and then deleted.

What we keep

• Your account: your name, email address, a one-way hash of your password, the browsers you chose to trust, and your workspaces and roles.
• What your systems send to smsyra: the text, the numbers it was sent to, the sender id and DLT ids, which key sent it, and the request as it arrived (with the key masked), including the sender’s IP address and user agent.
• What you set up: DLT templates, provider mappings, API keys (stored only as a keyed hash; shown to you once), settings.
• Usage and billing: how many texts each workspace used; for Team, your billing details and invoices. Card and bank details are handled by Razorpay — we never see or keep them.
• A record of important actions, such as keys made or revoked and people invited or removed.

Our logs never contain a text’s body, a recipient’s number, a one-time code or an API key.

Why

To run smsyra for you: show your texts, check them against your templates, answer your tests, keep your account secure, bill Team plans, send you the emails the service needs (sign-in codes, invites, plan limits) and help when you write to us. We don’t sell data and don’t use your texts to advertise.

Where

Everything is stored in India, in Mumbai (Google Cloud, asia-south1), including backups.

How long

• Captured texts: as long as your workspace’s history setting — 7 days at most on Free, 30 days at most on Team — and never more than 30 days. Rejected and simulated texts are kept a day at most.
• Your account and setup: while your account exists.
• Invoices and payment records: as long as Indian tax law requires.
• Backups: they roll over and are deleted within 35 days.

Who else sees it

Only the companies that help us run smsyra, each for its part: our cloud host (Google Cloud, in Mumbai), Brevo (to send our emails) and Razorpay (payments). We share data with authorities only when Indian law requires it.

Deleting your data

• One text: open it in the inbox and choose Delete.
• Every text in a workspace: an owner chooses Delete all texts in the inbox.
• Keep less: an owner shortens the history in Settings → Retention; older texts go within 10 minutes.
• From your tests: DELETE /v1/messages?to= removes every text to a number.
• Your account or a whole workspace: write to hello@smsyra.com from the account’s email. We delete it within 30 days, except invoices the law makes us keep.

Your rights

You can ask what we hold about you, have it corrected or deleted, and complain about how we handle it — write to hello@smsyra.com. If you are in someone’s test texts and want them removed, write to us too, or to the business that sent them.

Security

Connections are encrypted; passwords and API keys are stored only as hashes; each workspace’s data is kept apart in the database; sessions end after a week without use.

Children

smsyra is a tool for businesses and developers. It is not meant for anyone under 18.

Changes

We will email account owners before a change that matters reaches them. See also the terms.