♻️TinySMS

Privacy Policy
← Back to Plans

1. Who We Are

Wallisoft (sole trader), 7 Hunloke Avenue, Eastbourne, East Sussex, England.

We are the data controller for personal data collected in connection with Tiny-SMS licences and this website.

Privacy enquiries: [email protected]

2. What Data We Collect

Licence holders (paid plans)

  • Name and email address — to manage your licence and send support communications
  • Payment data — processed and stored by Stripe; we do not store card details
  • Licence status and tier — to verify your entitlement

App users

Tiny-SMS is designed so that no message content passes through our systems. The app communicates directly with Google's Gmail API using your own Gmail credentials. We do not receive, log, or store:

  • SMS message content
  • Phone numbers you send to
  • Email addresses of message senders or recipients
  • Activity logs generated by the app (stored locally on your device only)

Website visitors

We do not use tracking cookies or analytics on this website. Standard web server access logs (IP address, page visited, timestamp) are retained for up to 30 days for security purposes.

3. How We Use Your Data

  • To process and manage your licence subscription
  • To send invoices and billing notifications
  • To respond to support requests
  • To notify you of material changes to terms or the service
  • To comply with our legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

  • Contract — processing your licence and billing details is necessary to fulfil our contract with you
  • Legitimate interests — server security logs and licence verification
  • Legal obligation — retaining financial records as required by HMRC

5. Third Parties

Stripe

Payment processing is handled by Stripe Payments Europe, Ltd. Stripe processes payment card data under their own privacy policy and PCI DSS compliance. We receive only a payment confirmation and customer reference from Stripe.

Google

The Tiny-SMS app uses Google's Gmail API via OAuth 2.0. Your Gmail credentials are managed by Google — we never see your Gmail password. Google's use of your data is governed by Google's Privacy Policy.

Hetzner / TinyVPS infrastructure

This website is hosted on Hetzner infrastructure managed by Wallisoft. No message data is stored on this infrastructure.

6. Data Retention

  • Licence and billing records — 7 years (HMRC requirement)
  • Support correspondence — 2 years after last contact
  • Web server access logs — 30 days

7. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request erasure of your data (subject to legal retention obligations)
  • Object to processing based on legitimate interests
  • Portability of data we hold about you
  • Lodge a complaint with the ICO at ico.org.uk

To exercise any right, email [email protected]. We will respond within 30 days.

8. Cookies

This website does not use cookies for tracking or analytics. Session cookies may be set if you log in to manage your account — these are strictly necessary and expire when you close your browser.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to licence holders by email.

Last updated: March 2026