Privacy Policy

1. Introduction

Welcome to EchoCue. This Privacy Policy explains how EchoCue ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website echocue.com or use our SMS communication platform and services (collectively, the "Services"). We are committed to protecting your privacy and ensuring transparency about our data practices.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, phone number, company name, billing address, and payment information.
• Contact Information: When you upload contact lists for SMS campaigns, we collect the phone numbers, names, and any additional data you choose to include about your recipients.
• Communications: We collect information you provide when you contact our support team, participate in surveys, or communicate with us through our platform.
• SMS Content: We process the content of SMS messages you create and send through our platform, including message templates and broadcast content.

2.2 Information Collected Automatically

• Usage Data: Information about how you interact with our platform, including pages visited, features used, time spent, click patterns, and navigation paths.
• Device Information: IP address, browser type, device type, operating system, and unique device identifiers.
• Log Data: Server logs that may include IP addresses, access times, browser types, and pages viewed.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. See Section 8 for more details.

2.3 SMS Delivery and Response Data

• Delivery Status: Information about whether messages were successfully delivered, failed, or bounced.
• Response Data: Replies received from SMS recipients, opt-out requests, and engagement metrics.
• Carrier Information: Mobile carrier information necessary for message delivery.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our SMS platform, including message delivery, campaign management, and analytics.
• Account Management: To create and manage your account, authenticate users, and provide customer support.
• Billing and Payments: To process transactions, send invoices, manage subscriptions, and handle billing inquiries.
• Communications: To send you service-related notifications, updates about your account, technical notices, security alerts, and support messages.
• Marketing: With your consent, to send you promotional materials, newsletters, and information about new features (you can opt-out at any time).
• Analytics and Improvement: To analyze usage patterns, improve our platform functionality, develop new features, and enhance user experience.
• Compliance: To comply with legal obligations, respond to legal requests, enforce our Terms of Service, and protect our rights and the rights of our users.
• Security: To detect, prevent, and address technical issues, fraud, security breaches, and other harmful or illegal activities.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• SMS Gateway Providers: To deliver SMS messages to recipients.
• Payment Processors: To process payments and manage billing.
• Cloud Hosting Providers: To store data and host our platform infrastructure.
• Analytics Providers: To analyze platform usage and performance.
• Customer Support Tools: To provide customer service and technical support.

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Requests from law enforcement or government authorities
• Legal claims or disputes
• Situations involving potential threats to physical safety

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Retention

We retain your information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained while your account is active and for up to 90 days after account closure, unless longer retention is required by law.
• Contact Lists and SMS Content: Retained for the duration of your subscription and for up to 90 days after deletion or account closure.
• Transaction Records: Retained for 7 years for accounting and tax purposes.
• Usage Logs: Retained for up to 12 months for security and analytics purposes.
• Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal data we hold about you.
• Correction: Request corrections to inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal and contractual obligations.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, including direct marketing.
• Restriction: Request restriction of processing under certain circumstances.
• Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
• Lodge a Complaint: File a complaint with your local data protection authority.

To exercise these rights, please contact us at info@echocue.com. We will respond to your request within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data security and privacy
• Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect information and improve your experience. Types of cookies we use include:

• Essential Cookies: Necessary for the platform to function properly.
• Performance Cookies: Collect anonymous information about how you use our platform.
• Functional Cookies: Remember your preferences and settings.
• Marketing Cookies: Track your visits across websites to deliver targeted advertising (with your consent).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. When we transfer data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by regulatory authorities
• Ensuring service providers maintain adequate data protection standards
• Compliance with applicable cross-border data transfer regulations

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Third-Party Links and Services

Our platform may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Your Responsibilities as a User

When using our Services, you are responsible for:

• Obtaining proper consent from recipients before sending them SMS messages
• Complying with applicable telecommunications and privacy laws in your jurisdiction
• Ensuring the accuracy of contact information you upload to our platform
• Honoring opt-out requests from recipients
• Protecting your account credentials and notifying us of any unauthorized access

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at info@echocue.com.

14. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 6. The legal bases for our processing include:

• Contract Performance: Processing necessary to provide our Services
• Legitimate Interests: For business operations, security, and improvements
• Consent: For marketing communications and optional features
• Legal Compliance: To comply with applicable laws and regulations

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through a prominent notice on our platform
• Obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: