Privacy Policy

1. Scope of This Policy

This policy covers personal information we collect through our website, when you register for or use our Services, when you contact our sales or support teams, and when you interact with our platform as a Customer. It also explains, at a high level, how message and recipient data is handled when our Services are used to communicate with end users.

This policy does not govern the privacy practices of third parties, including the mobile network operators, messaging platforms (such as WhatsApp/Meta and RCS-enabled carriers), or other services that our Customers may separately use.

2. Our Role: Controller and Processor

Because Cyberscape provides messaging infrastructure, our role in relation to personal data depends on whose data is involved:

• As a Controller: for information about our own Customers — the businesses and individuals who register for an account, purchase Services, or contact us — we determine how and why that information is processed, as described in this policy.
• As a Processor (or Service Provider): when a Customer uses our platform to send SMS, WhatsApp, RCS, or email messages to their own customers or contacts ("End Users"), we process the message content and End User contact details (such as phone numbers or email addresses) solely on the Customer's behalf and according to their instructions, in order to deliver those messages. The Customer, not Cyberscape, determines what is sent, to whom, and why, and is responsible for obtaining any consent required by law to message their End Users.

If you are an End User who received a message sent through our platform and have a question about that message, please contact the business that sent it directly; they control that communication and your data in connection with it.

3. Information We Collect

Account and Business Information

When you register for an account, request a demo, or contact us, we collect information such as your name, business email address, phone number, company name, job title, industry, country, and any details you provide about your intended use of our Services.

Payment Information

Where applicable, billing details are processed to manage your account and invoicing. We do not store full payment card numbers on our own systems; payment processing is handled by our payment providers in accordance with their own security standards.

Message Content and End User Data

Operating our Services necessarily involves processing the content of messages sent through our platform (SMS, WhatsApp, RCS, and email), along with the recipient information needed to deliver them — such as phone numbers, email addresses, and delivery status. This data is supplied by our Customers and is processed on their behalf as described in Section 2 above.

System Integration & VAS Data

For mobile network operators and carriers using our System Integration and Value-Added Services (SMSC, USSD, RBT, Voicemail, Anti-Spam, Signaling Firewall, eSIM management, and related infrastructure), we may process network-level and subscriber-related data strictly as necessary to provide the contracted infrastructure services, and subject to the terms of the applicable service agreement with that operator.

Automatically Collected Information

When you visit our website, we automatically collect certain technical information, including IP address, browser type and version, device identifiers, pages visited, and referring URLs, typically through cookies and similar technologies (see Section 10).

4. How We Use Information

We use the information described above to:

• Provide, operate, and maintain our Services, including routing and delivering messages across SMS, WhatsApp, RCS, and email channels;
• Create and manage Customer accounts, process orders, and handle billing;
• Provide customer support and respond to inquiries;
• Monitor for fraud, abuse, and violations of our Terms and Conditions or Acceptable Use Policy;
• Improve our website and Services, including through analytics;
• Comply with legal obligations and enforce our agreements; and
• Send administrative communications and, where you have agreed, marketing communications.

5. Legal Basis for Processing

Where the General Data Protection Regulation ("GDPR") or similar laws apply, we rely on the following legal bases to process personal data:

• Performance of a contract — to provide the Services you have signed up for;
• Legitimate interests — such as securing our platform, preventing fraud, and improving our Services, balanced against your rights and interests;
• Consent — for optional marketing communications and certain cookies, which you may withdraw at any time; and
• Legal obligation — where we must retain or disclose information to comply with the law.

6. How We Share Information

Delivering messages across multiple channels necessarily involves sharing data with the networks and platforms that carry those messages. We disclose information in the following circumstances:

• Mobile network operators, carriers, and SMS aggregators: to route and deliver SMS messages internationally;
• WhatsApp (Meta Platforms, Inc.): message content and recipient phone numbers are shared with WhatsApp's Business Platform as required to deliver WhatsApp Business messages, subject to WhatsApp's own Business Policy and Meta's Privacy Policy;
• RCS-enabled carriers and platform providers (including Google, where applicable): to deliver RCS business messages, with automatic fallback to SMS where RCS is unavailable;
• Email delivery infrastructure providers: to transmit transactional and marketing email;
• Service providers and subprocessors: vendors who support our operations, such as hosting, analytics, payment processing, and customer support tooling, under contractual confidentiality and data protection obligations;
• Affiliates: companies under common ownership with Cyberscape, for the purposes described in this policy;
• Legal and safety reasons: where required by law, legal process, or to protect the rights, property, or safety of Cyberscape, our Customers, or others; and
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality arrangements.

We do not sell personal information to third parties for their own independent marketing purposes.

7. International Data Transfers

Cyberscape is based in the United Arab Emirates and delivers Services to businesses and their End Users in many countries. As a result, personal information may be transferred to, stored, and processed in countries other than the country in which it was originally collected, including countries that may have different data protection laws than your own. Where required, we use appropriate safeguards, such as contractual protections with our service providers and carrier partners, to protect personal information transferred internationally.

8. Data Retention

We retain Customer account information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, accounting, or contractual obligations and to resolve disputes. Message content and End User delivery data processed on behalf of a Customer is generally retained only as long as necessary to deliver the message and provide delivery reporting, or as otherwise instructed by the Customer or required by applicable law, before being deleted or anonymized.

9. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, including encryption in transit, access controls, and network security monitoring appropriate to a carrier-grade telecommunications platform. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to operate correctly, remember your preferences, and understand how visitors use our site, including through tools such as Google Analytics. Cookies fall broadly into these categories:

• Essential cookies — required for the website to function;
• Analytics cookies — help us understand site usage so we can improve it; and
• Preference cookies — remember choices you've made.

Most browsers let you refuse or delete cookies through their settings. Doing so may affect how parts of our website function.

11. Your Privacy Rights

If You Are in the European Economic Area or United Kingdom (GDPR)

Subject to applicable conditions and exceptions, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure; request restriction of processing; object to processing based on legitimate interests; request data portability; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

If You Are a California Resident (CCPA/CPRA)

You have the right to know what personal information we collect, use, and disclose about you; to request deletion of your personal information, subject to certain exceptions; to correct inaccurate information; and to opt out of the "sale" or "sharing" of personal information, though Cyberscape does not sell personal information as those terms are commonly understood. We will not discriminate against you for exercising these rights.

Exercising Your Rights

To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before fulfilling certain requests. If your request relates to a message you received from one of our Customers, we may need to direct you to that Customer, who controls that communication.

12. Children's Privacy

Our Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

13. Marketing Communications

We are firmly against unsolicited commercial email ("spam") and do not sell or share your contact details with unauthorized third parties for their own marketing. Marketing communications from Cyberscape include a clear way to opt out; you can also contact us directly at any time to be removed from marketing lists. Opting out of marketing does not affect service-related or transactional communications necessary to operate your account.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or legal requirements. We will post the revised policy on this page with an updated effective date. Material changes will be communicated through reasonable means, such as a notice on our website or a direct email to registered Customers.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: