Privacy policy

1. Who we are and the scope of this policy

Oasentra is a business messaging product operated by DAILY ICT SOLUTIONS (“we,” “us,” or “our”). This policy applies to information processed through the Oasentra website, workspace, and support communications.

Businesses using our workspace remain responsible for having a lawful basis and appropriate permission to contact their recipients. Third-party messaging services also process information under their own terms and privacy policies.

2. Information we collect

Account and contact information

We may collect a user's name, business email address, authentication details, business name, and information provided in support requests.

Connection and messaging information

To provide the workspace, we may process business account identifiers, phone number identifiers, recipient telephone numbers, message or template content, template language and category, external message identifiers, delivery status, error details, and relevant timestamps.

Technical and usage information

Our systems may record IP address, browser and device information, sign-in events, diagnostic logs, request timestamps, and pages or features used. We use this information for security, troubleshooting, and service operation.

Information we do not request through the interface

Users should not enter payment-card details, government identity numbers, medical records, passwords, access tokens, or other highly sensitive information into message bodies, templates, or support requests.

3. How we use information

We use information to:

• create and secure user accounts;
• connect authorised business messaging resources;
• send user-directed messages and submit or synchronise message templates;
• display activity, delivery state, and operational errors;
• provide support, investigate incidents, and prevent misuse;
• maintain, analyse, and improve service reliability; and
• meet applicable legal, regulatory, and contractual obligations.

4. Legal bases

Depending on the context and applicable law, we process information to perform a contract, pursue legitimate interests such as securing and operating our services, comply with legal obligations, or act on consent. A business using our tools must separately determine and document the proper basis for its customer communications.

5. Sharing and service providers

We may share limited information with infrastructure, hosting, security, email, support, and messaging-platform providers when necessary to deliver the service. These parties receive only the information needed for their functions and are expected to protect it under appropriate obligations.

We may also disclose information when required by law, to protect people or our systems, to investigate abuse, or as part of a legitimate business reorganisation. We do not sell personal information or share it for unrelated third-party advertising.

6. International processing

Our messaging platform and any hosting or support providers may process information in countries different from the user's location. We will identify the providers used by the deployed service and apply transfer safeguards where required by applicable law before onboarding external business customers.

7. Retention and deletion

We retain information only for as long as it is reasonably needed to operate the service, keep appropriate business and security records, resolve disputes, and meet legal obligations. In the current review build, signed webhook-event summaries expire after 30 days and failed queue records are pruned after seven days. Account, connection, message, template, audit, support, and deletion-request records are reviewed as part of a verified deletion request or account closure.

Deletion requests are recorded for identity and authority checks, manual processing, and completion tracking. If the deployed service uses backups, deleted data may remain until the documented backup rotation expires. Instructions for requesting deletion are available on our data deletion page.

8. Security

We use administrative, technical, and organisational safeguards proportionate to the nature of the information we process. These include access controls, credential-management practices, request validation, logging controls, and secure transport where supported. No online service is completely risk-free, so users must also protect their credentials and report suspected unauthorised access promptly.

9. Your choices and rights

Subject to applicable law, individuals may ask to access, correct, delete, restrict, or receive a copy of their personal information, or object to certain processing. They may also withdraw consent where processing relies on consent.

We may need to verify identity and authority before acting on a request. If information was provided to us by one of our business customers, we may refer the request to that business as the responsible controller.

10. Children

Our services are intended for authorised business users and are not directed to children. We do not knowingly collect personal information directly from children through this workspace.

11. Policy changes

We may update this policy as our services or legal obligations change. We will post the revised version here and update the date above. Material changes may also be communicated through the service or by email.

12. Contact us

For privacy questions or rights requests, email [email protected]. Please do not include passwords, access tokens, or unnecessary sensitive information.