Privacy Policy for SMS Authentication Service

Introduction

This Privacy Policy explains how we collect, use, and protect your personal information when you use our SMS-based authentication system to access the platform as an employee of a company that uses our services. We are committed to protecting your privacy and ensuring the security of your personal information.

Information We Collect

We collect the following information when you use our SMS authentication service:

Mobile phone number
Authentication codes sent and received
Time and date of authentication attempts
IP address and device information
User ID and company affiliation

How We Use Your Information

We use your information for the following purposes:

To authenticate your identity when accessing the platform
To protect your account from unauthorized access
To communicate important service information and authentication codes
To detect and prevent fraud or misuse of the service
To maintain records of access for security and compliance purposes
To improve the reliability and security of our authentication system

Legal Basis for Processing

We process your personal information based on:

Legitimate business interests in providing secure authentication services
Contractual necessity to provide access to your employer's systems
Your consent to receive SMS messages for authentication purposes
Legal obligations related to security and data retention

Data Retention

We retain your authentication data for as long as necessary to:

Maintain the security of your account
Comply with legal obligations
Fulfill business requirements of your employer
Address security incidents or disputes

Specific retention periods are determined based on applicable regulations and your employer's requirements.

Information Sharing

We may share your information with:

Your employer, as the administrator of the service
Service providers who assist in delivering the authentication service
Law enforcement when required by law
Regulatory authorities for compliance purposes

We do not sell or rent your personal information to third parties.

Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legal requirements)
Object to certain processing of your data
Request restriction of processing
Data portability

To exercise these rights, please contact us using the information in the "Contact Us" section.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of sensitive data
Access controls limiting who can access your information
Regular security assessments
Staff training on data protection
Secure data transmission protocols

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or regulatory requirements. Significant changes will be communicated to you through your employer or directly through the service.

Privacy﻿