TelPOSTelPOS Bulk SMS
Privacy and data protection

TelPOS Business Messaging Privacy Policy

How TelPOS ERP collects, uses, protects and deletes information in the TelPOS Bulk SMS web portal and mobile app, including SMS and the TelPOS Business Messaging integration with WhatsApp.

Effective: 11 August 2026 · Last updated: 13 October 2026

Who we are

TELENICAL SYSTEMS LIMITED, Tanzania, provides TelPOS ERP and operates TelPOS Bulk SMS, including the mobile application with package name app.telposlite.sms, the web portal, and the central multi-domain account service. Questions can be sent to info@telpos-lite.app.

Information we collect

Account and business information

We collect the name, business name, username, email address, telephone number, country, region and city provided during registration or account administration. We process authentication credentials securely and do not store a readable copy of your password.

Contacts and messaging data

If you enable phone-contact permission, the app can read contact names, phone numbers and optional email addresses on your device. Access is off by default. Contacts are uploaded only when you select them and confirm synchronization. We also process recipient lists, message content, templates, sender IDs, campaigns, schedules, replies, opt-outs and delivery status so the requested messaging service can operate.

Meta and WhatsApp Business connection

When an authorized business administrator connects through Meta, we process the selected WhatsApp Business Account ID, business phone-number ID, display number, verified business name and the access token Meta issues with the administrator’s permission. We use whatsapp_business_management to connect the selected business assets, manage message templates and subscribe to delivery updates; we use whatsapp_business_messaging to send authorized messages and receive replies and delivery/read updates.

Access tokens are stored encrypted on the TelPOS server and are not included in mobile-app responses. Connecting a business does not give TelPOS access to unrelated personal WhatsApp conversations. Incoming messages and attachments sent to the connected business number, recipient numbers, approved template content and message status may be processed to provide its business inbox and messaging reports.

Device, security and service data

We may process device platform, app version, device label, locale, time zone, session and login-security information, IP-derived security signals, diagnostic errors and service activity. We use this information to secure accounts, route multi-domain ERP logins, diagnose faults and maintain delivery records.

Billing and verification records

We process plan, balance, invoice, payment-status and transaction reference information. Payment providers process payment instruments under their own privacy terms. Sender-ID verification may require business documents selected by the user.

How we use information

Sharing and service providers

We disclose only the information needed to service providers acting for TelPOS, including hosting, email, payment, SMS, WhatsApp and delivery-status providers. Recipient numbers and message content are transmitted to the selected messaging provider to perform a send. We may disclose information when required by law, to protect users or the service, or as part of a properly governed business transfer. We do not sell personal information or use it for third-party behavioral advertising.

Security and retention

Data is encrypted in transit using HTTPS. Mobile session tokens use encrypted device storage. Access is restricted by account, business, tenant and role. We retain active-account information for service delivery; security and delivery logs for a limited operational period; and payment, fiscal, dispute or regulatory records for the period required by applicable law. When no longer required, information is deleted or anonymized.

Your choices and account deletion

You can deny or revoke phone-contact permission in the app or Android settings. You can correct account information through your workspace or support. To delete an account and associated app data, use the public account deletion request page. We verify ownership before deletion. App-specific profile, session, imported-contact, template and campaign data is deleted or anonymized, except information that must be retained for legal, security, fraud-prevention, payment, dispute or regulatory reasons.

Disconnecting WhatsApp or deleting Meta-related data

You may remove TelPOS Business Messaging from the connected integrations in your Meta business account, or ask TelPOS support to disconnect it. Removing permission prevents further authorized API access but does not itself delete records already stored in TelPOS. To request deletion of the connection credentials and associated WhatsApp data without closing the ERP account, choose WhatsApp connection and related data only on the data deletion form. We verify the requester’s authority over that business before acting and notify them using their account email.

Disconnecting TelPOS does not delete your WhatsApp Business Account at Meta or messages already received by customers. Meta and recipients control their own copies. Data we must retain for an applicable legal or security obligation is restricted to that purpose; we explain any retention that applies when processing your request.

Children

TelPOS Bulk SMS is a business communication service and is not designed for children. We do not knowingly collect personal information from children through the app.

International and multi-domain processing

Authorized TelPOS ERP domains may process workspace data while the central TelPOS service performs secure domain discovery. Providers may process information in other countries subject to contractual and legal safeguards.

Changes and contact

We may update this policy when the service or law changes. The effective date above identifies the current version. Contact info@telpos-lite.app for privacy questions or complaints.