Only what we need
To run your account we keep a name, a phone number, and an email. Nothing else.
What we collect from you
When you create an account, you give us three pieces of information:
- Name
- A label we use inside the app and on receipts. It does not need to match an official ID. A first name, a nickname, or a business name is fine.
- Phone number
- Used to sign you in, send security codes, and process mobile-money payments. We do not call you for marketing.
- Used to sign you in, send verification codes, receipts, and notifications about your account. Nothing else.
We also keep records that exist because of how the service works: your SMS sending history, payment transactions, sender ID requests, and basic login activity (date, time, IP) for security. We never collect government IDs, date of birth, physical address, or financial card details ourselves.
How we use it
- To let you sign in to your account (email or phone, plus password).
- To send security codes when you reset a password, enable two-factor authentication, or change your email.
- To send transactional emails: payment receipts, sender ID approvals, low-balance notices.
- To complete mobile-money payments: the phone number you enter during payment is passed to the payment gateway only for that transaction.
- To investigate fraud, abuse, or violations of our Terms.
What we do not share
We do not sell your information. We do not rent it. We do not share it with advertisers, marketers, or data brokers. We do not run ads on this platform.
Service providers we rely on
To deliver SMS and accept payments, some information has to leave our servers. We use only the minimum needed, and only providers whose terms forbid them from using your data for their own marketing:
- SMS gateway Receives the recipient phone number, sender ID, and message body for each SMS. Cannot deliver otherwise.
- WhatsApp (Meta Platforms Ireland Limited) When you send over WhatsApp, receives the recipient's WhatsApp number and the message content to deliver it. Governed by Meta's own terms and privacy policy.
- Payment processor Receives the payer phone number and amount when you top up. Never your contact list or message content.
- Email gateway Receives the email address and content of transactional emails (receipts, codes). Nothing about your SMS activity.
- Hosting infrastructure Stores the encrypted database and the application code that runs eHub SMS.
We may also disclose information if required by Tanzanian law, a valid court order, or to protect the safety of our users.
About your customers' phone numbers
When you upload a contact list to send SMS, those numbers belong to you. We store them so you can re-use them, group them, and send to them, but we never message them on our own behalf, sell them to anyone, or use them to seed any other product. They are not used to improve our marketing or our AI; they are not used at all except to deliver the SMS you ask us to send.
Sending messages over WhatsApp
eHub lets you message your customers over the WhatsApp Business Platform, which is operated by Meta. When you use this channel:
- What is sent to Meta. To deliver a WhatsApp message, we transmit the recipient's WhatsApp number and the message content, including any template, media, and variables you provide, to Meta Platforms Ireland Limited, which operates WhatsApp. Meta processes this to deliver the message, under its own terms and privacy policy, which may involve processing on Meta's infrastructure outside Tanzania.
- Replies and delivery status. Delivery and read receipts, and any reply a recipient sends you, are returned to us so you can see them in your account. We store them for your use only, under the same rules as the rest of your message data.
- Why we can message them. We send WhatsApp messages only on your instruction, to recipients you provide, and only within WhatsApp's rules: business-initiated messages use approved message templates, and free-form replies are allowed only inside the 24-hour window after a customer messages you.
- Opting out. A recipient can stop receiving your WhatsApp messages by asking you to stop or by blocking the sender in WhatsApp. We honour opt-out requests and pass them on to you.
- What we do not do. We do not use WhatsApp numbers or message content for our own marketing, do not sell them, and do not use them to train any model. They are used only to deliver the messages you ask us to send and to show you the results.
Your use of WhatsApp is also governed by Meta's own terms. See the WhatsApp Business Messaging Policy and the WhatsApp Privacy Policy.
How we protect your data
- All traffic to and from our servers is encrypted with HTTPS.
- Passwords are stored using one-way hashing, so even we cannot read them.
- Two-factor authentication is available to every account and recommended.
- Access to production systems is restricted to a small operations team and audited.
- API keys and webhook signing secrets are stored encrypted at rest.
Your rights
We handle personal data in line with Tanzania's Personal Data Protection Act, 2022, including your rights to access, correct, and delete your data and to object to its processing. At any time you can:
- See what we hold about you from your account settings.
- Update your name, phone, or email. Email changes are confirmed by a code sent to the new address.
- Export your SMS history and contacts as CSV files.
- Delete your account. Email support@ehub.co.tz and we will remove your data within 30 days, except records we are legally required to keep (e.g. tax records for completed transactions).
Cookies and tracking
We use a single session cookie to keep you signed in while you use the app. We do not use advertising cookies, cross-site trackers, or third-party analytics. The only first-party telemetry we collect is basic technical logs (date, time, IP, status code) needed to keep the service running and to investigate problems.
Children
eHub SMS is a business tool and is not intended for anyone under the age of 18. If you believe an account has been created by a minor, contact us and we will remove it.
Changes to this policy
If we make material changes to how we handle your data, we will update the date at the top of this page and notify account holders by email at least seven days before the change takes effect. Minor wording fixes will not trigger a notification.
Contact
Questions, complaints, or requests about your data:
eHUB Company Limited
Dar es Salaam, Tanzania
Email: support@ehub.co.tz