Legal

Privacy Policy

Last updated 22 September 2026.

Draft. This policy is a starting text prepared for review by Dot Sms. It is not published to search engines until legalDraft is switched off in site.ts.

Who we are

Dot Sms (“we”) operates this website at www.dotsms.net and the Dot Sms Business One platform at dotsms.net. Questions about this policy: [email protected].

This website

The website is a static site. It stores no account and sets no tracking cookies of its own.

  • Demo and contact requests. When you send the demo form or message us on WhatsApp, we receive the details you enter — name, business name, city, phone number, number of branches, business type and your message. We use them only to reply to you and arrange a demo, and we keep them for as long as we are in contact about it.
  • Analytics. If enabled, we use a privacy-friendly analytics service that counts page views without cookies and without identifying visitors. [FILL — name the service, or remove this item.]
  • Fonts. Pages load fonts from Google Fonts; your browser sends its request to Google when it fetches them.
  • Server logs. Our web server keeps standard access logs (IP address, page requested, time, browser) for security and troubleshooting, and deletes them on a rolling basis. [FILL — retention period.]

The platform (customers’ data)

Businesses that use Dot Sms Business One enter their own operating and accounting data into the platform. That data belongs to the business. In relation to it, we act as the service provider and apply the following:

  • Isolation between businesses. Every business’s records are separated by row-level security in the database itself, so one business’s data is invisible to every other.
  • Audit log. The platform keeps an immutable, server-written audit log of changes, deletions and refused actions. It cannot be edited, even by database administrators.
  • Backups. We take backups of the platform and run a data census before and after every deployment.
  • Access. Our staff access a business’s data only to provide support the business has asked for, or to operate the platform. [FILL — describe the support access process.]
  • Owner app. Mobile logins are created and managed by the business from its desktop; push alerts are sent to the devices the business registers.

Your rights

You can ask us what personal data we hold about you, ask for it to be corrected or deleted, and withdraw consent to any contact at any time by writing to [email protected] or on WhatsApp. [FILL — add any rights required by applicable law, e.g. Pakistan’s data protection rules.]

Changes

We will post any change to this policy on this page and update the date at the top.