Privacy Policy

This Privacy Policy explains how Niilox Communications (“Niilox”, “we”, “us”) processes personal data when you use Niilox API, our websites, developer portal, and APIs.

Controllers for portal and marketing data: Niilox Communications. For end-user content and traffic you send through the APIs (SMS bodies, call metadata, chat messages), you are typically the controller and we act as a processor under your instructions — see section 6.

1. Data we collect

• Account data — name, email, company, authentication identifiers (Google, password hashes, MFA secrets), tenant and membership records.
• Billing data — plan, invoices, wallet top-ups; payment card details are handled by our payment processor (we do not store full card numbers).
• Usage and technical data — API requests, IP addresses, device/browser info, logs, approximate location derived from IP, error reports.
• Communications metadata — for SMS/voice/numbers: E.164 numbers, timestamps, delivery status, route/carrier signals, message length; message bodies when required to deliver the service.
• Support — emails and tickets you send us.
• Cookies — see our Cookie Policy.

2. How we use data

• Provide, secure, and operate the Services and developer portal.
• Authenticate users, prevent fraud and abuse, and enforce Acceptable Use.
• Bill for usage and manage subscriptions.
• Communicate about product, security, and account changes.
• Comply with law, carrier requirements, and lawful requests.
• Improve reliability (aggregated or de-identified analytics where possible).

3. Legal bases (EEA/UK)

Where GDPR applies, we rely on:

• Contract — to provide the Services you request.
• Legitimate interests — security, product improvement, preventing abuse (balanced against your rights).
• Consent — where required (e.g. certain cookies or marketing emails).
• Legal obligation — tax, accounting, and telecom retention where mandated.

4. Sharing

We share data with:

• Infrastructure and cloud providers hosting the platform.
• Telecom carriers and number/SMS/voice partners needed to deliver messages and calls.
• Payment processors for checkout and payouts.
• Professional advisors and authorities when legally required.

We do not sell personal data.

5. International transfers

We may process data in the EU and other regions where our infrastructure or carriers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers outside the EEA/UK.

6. Customer Data / processor role

When you send end-user communications through our APIs, you determine the purposes of processing that Customer Data. We process it to deliver the Services, on your instructions, and as described in our Terms. You are responsible for providing notices and obtaining consents from your end users.

7. Retention

We retain account data while your account is active and for a reasonable period afterward for security, billing disputes, and legal obligations. Message bodies and detailed logs are retained only as long as needed for delivery, debugging, abuse investigation, and legal requirements, then deleted or anonymized. You can request deletion as described in Delete account.

8. Security

We use encryption in transit, access controls, and operational monitoring. No method of transmission or storage is 100% secure; please protect API keys and enable MFA where available.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing or withdraw consent. Contact support@niilox.com. You may also lodge a complaint with your local supervisory authority (in Finland: the Office of the Data Protection Ombudsman).

10. Children

The Services are directed at businesses and developers, not children under 16. We do not knowingly collect children’s data.

11. Changes

We may update this Policy by posting a new version with a revised date. Material changes will be highlighted in the portal or by email when practical.

12. Contact

Privacy requests: support@niilox.com
Controller: Niilox Communications · Product: Niilox API