Privacy Policy

1. Who is responsible

OpenAssure, Flat 21, Building 2744, Road 2841, Al Sayh, Bahrain, is the controller of the personal data described here. Contact us about privacy at hello@smppsimulator.com.

For the test messages your SMPP clients send into the service, you (our customer) decide what goes into them, and we process them on your behalf.

2. What we collect

Account information

• Your first name, last name and email address.
• The names of accounts you create or join, your role in each, and the email addresses of people you invite.

Test messages and SMPP credentials

• Everything your SMPP client sends to the simulator, such as source and destination numbers, message text, raw bytes and the other SMPP fields, plus the time each message arrived and its status.
• The SMPP system_id and password for your inbox.

Please use test data where you can. The SMPP connection is plain TCP and is not encrypted, so don’t send real people’s personal or sensitive information through it.

Technical data

• IP addresses and connection details in our server logs, for the dashboard and for SMPP connections.
• The cookies described in section 6.

Billing data

Payments are handled by Paddle, our Merchant of Record. Paddle collects your payment details, and we never see or store your full card number. Paddle shares with us what we need to manage your subscription, such as your name, email address, country, plan and payment status.

This website

The marketing site at smppsimulator.com sets no cookies and uses no analytics or advertising trackers.

3. Why we use it, and our legal basis

• To provide the service: create your account, sign you in, store and show your test messages, and send receipts back to your client. Legal basis: performing our contract with you.
• To send service emails: sign-in links, invitations, and important notices about your account, billing or these policies. Legal basis: contract.
• To bill you, through Paddle. Legal basis: contract, and our legal obligations for tax and accounting.
• To keep the service secure and working, by investigating abuse and fixing faults. Legal basis: our legitimate interest in running a safe, reliable service.

We don’t sell personal data, use it for advertising, or make automated decisions about you that have legal effects.

4. Who we share it with

We share personal data only with service providers that help us run SMPP Simulator, and only as much as they need:

• Paddle: payments, invoices, tax and subscription management, as Merchant of Record.
• Our hosting provider: runs the servers and database where the service and your data live.
• Our email delivery provider: sends sign-in links, invitations and service emails.
• DiceBear: generates the avatar shown in the dashboard from your first and last name.
• jsDelivr and cdnjs (Cloudflare): serve some of the dashboard’s scripts. Like any website, they see your IP address when your browser loads them.

We may also disclose data if the law requires it, or to protect our rights or users’ safety. If our business is sold or merged, data may pass to the new owner under the same protections.

5. How long we keep it

• Account information: while your account is open.
• Test messages: until you delete them or clear the inbox, or until the account is closed.
• Server logs: for up to 30 days, unless we need them longer to investigate a security issue.
• Billing records: as long as tax and accounting law requires. Paddle keeps its own records under its privacy policy.

When an account is closed, we delete its data within 30 days, apart from records we must keep by law.

6. Cookies

The dashboard at app.smppsimulator.com uses only cookies it needs to work:

• Session cookie: keeps you signed in while you use the dashboard. It ends when you close your browser.
• Remember-me cookie: keeps you signed in between visits until you sign out. It lasts up to a year, and is renewed when you visit.

Paddle’s checkout may set its own cookies to process payments securely. Those are covered by Paddle’s privacy policy.

7. International transfers

Our providers may process data outside your country. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions or the standard contractual clauses approved for those transfers.

8. Security

The dashboard is served over HTTPS. Sign-in uses one-time email links instead of passwords, and only owners and admins can reset SMPP credentials or clear an inbox. No system is perfectly secure, but we take reasonable measures to protect your data, and we will tell you without undue delay if a breach affects it.

9. Your rights

Depending on where you live, you have the right to:

• see the personal data we hold about you and get a copy of it;
• correct it if it is wrong;
• have it deleted;
• object to, or ask us to restrict, how we use it;
• receive it in a portable format.

Email hello@smppsimulator.com to use any of these rights. We will reply within 30 days. You can also complain to the data protection authority where you live.

10. Children

The service is for businesses and developers. It isn’t intended for anyone under 18, and we don’t knowingly collect their data.

11. Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will email account owners before it takes effect.