Privacy Policy

Last updated: 1-April-2026

kwtSMS.com (operated by BoxLink Center / BoxLink.NET) respects the privacy of its customers and website visitors. This policy explains what information we collect, how we use it, how we protect it, and what your rights are when using our services.

By using kwtSMS.com, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

1. Who We Are

  • Service: kwtSMS.com
  • Operator: BoxLink Center (BoxLink.NET)
  • Address: Nour Complex, Salmiya, Kuwait
  • Contact: sales@kwtsms.com  |  +965 9922-0322

We are the data controller for the information you provide when using our website and services.

2. Information We Collect

We only collect information that is necessary to operate the service reliably and securely.

2.1 Account Information

  • Name, company name, and commercial license details (when required for Sender ID registration).
  • Email address and mobile number.
  • Username and password (passwords are stored in encrypted / hashed form).
  • Civil ID or commercial documents submitted for Sender ID registration.

2.2 Payment Information

  • Payments are processed by KNET through BoxLink.NET.
  • We do not store your full card or bank details. We only receive transaction references and confirmation data.

2.3 Message & Usage Data

  • Recipient mobile numbers submitted through the API or web app.
  • SMS message content you send through the platform.
  • Sender IDs registered to your account.
  • Delivery reports, timestamps, and message status records.
  • API logs, including request origin, endpoint used, and any errors.

2.4 Technical & Security Data

  • IP address used to access your account and to make API requests.
  • Browser type, device type, operating system, and screen resolution.
  • Device fingerprint identifiers (a combination of browser and device characteristics used to recognize your device across sessions).
  • Login timestamps, session activity, and logout events.
  • Geo-location data derived from IP address (country and city level only; we do not collect GPS location).
  • Records of user actions inside your account (pages visited, features used, messages sent, settings changed) for support, auditing, and service improvement purposes.

3. How We Use Your Information

We use the information we collect only for the following purposes:

  • To operate the SMS gateway and deliver your messages through telecom operators.
  • To authenticate account logins and protect against unauthorized access.
  • To operate security features such as Two-Factor Authentication (2FA), country-login mismatch alerts, suspicious login detection, and device recognition.
  • To process payments and credit your account.
  • To provide customer support, troubleshoot issues, and respond to inquiries.
  • To comply with Kuwaiti telecom regulations, Sender ID approval requirements, and legal obligations.
  • To detect and prevent fraud, abuse, spam, and violations of our Acceptable Usage Policy.
  • To analyze usage patterns and user interactions within the account in order to improve our platform, fix bugs, and prioritize new features.
  • To send service-related notifications (for example: low balance alerts, login alerts, service updates).

We do not sell your personal data, and we do not use it ourselves for advertising, ad targeting, or audience profiling. Your data is used only to run the SMS service you paid for.

4. Message Content & Review

SMS content sent through our platform passes through our systems and is stored for delivery, reporting, audit, and support purposes.

  • Our staff may randomly review message content to ensure compliance with our Acceptable Usage Policy, detect spam or prohibited content, and troubleshoot technical issues.
  • Access to message content is restricted to authorized personnel only and is logged internally.
  • We will never read or disclose message content for marketing or commercial purposes unrelated to operating the service.

5. Sharing of Information

We only share your information when necessary to deliver the service or when required by law.

  • Telecom Operators: Recipient mobile numbers, Sender IDs, and message content are transmitted to Kuwaiti and international telecom operators (Zain, Ooredoo, STC, and others) so your messages can be delivered.
  • Payment Processor: Payment data is handled by KNET through BoxLink.NET.
  • Regulatory Authorities: Sender ID applications include Civil ID and commercial documents, which are submitted to telecom operators for approval as required by Kuwaiti regulations.
  • Infrastructure Providers: We use standard hosting, security, and analytics providers (see Section 7) who process limited data on our behalf.
  • Legal Obligations: We may disclose information when required by a valid legal order from a competent Kuwaiti authority, or to protect the safety, rights, or property of our users or the public.

6. Data Retention

We retain account data, message content, and logs for as long as your account remains active, and for a reasonable period afterwards, for the following reasons:

  • To provide continuity of reporting and message history for customers.
  • To comply with regulatory and telecom record-keeping requirements.
  • To investigate disputes, fraud, or abuse if they arise later.
  • To maintain financial and audit records.

If your account is deleted under our Acceptable Usage Policy (for example, after extended inactivity as described in that policy), associated message logs and data will be removed or anonymized at that time.

7. Cookies & Analytics

Our website uses cookies and similar technologies for essential operation and to understand how visitors use the site.

  • Essential Cookies: Required for login sessions, account security, and basic website functionality. These cannot be disabled without breaking the service.
  • Analytics Cookies: We use Google Analytics to understand website traffic, popular pages, and general usage patterns. Google Analytics may place cookies on your device and collect information such as IP address, browser type, and pages visited. This data is aggregated and used to improve our website.
  • Other Tools: From time to time we may use additional standard tools for performance monitoring, security, or advertising measurement. Any such tools will be used under the same principles described in this policy.

You can disable cookies in your browser settings, but some parts of the website may stop working correctly. You can also opt out of Google Analytics using the official Google Analytics opt-out browser add-on.

8. Data Security

We take reasonable steps to protect your information:

  • All traffic is encrypted using SSL/HTTPS.
  • Passwords are stored in encrypted / hashed form.
  • API access supports IP lockdown (whitelisting) so requests are only accepted from authorized IP addresses.
  • Accounts support Two-Factor Authentication (2FA) via SMS.
  • We use device fingerprinting and behavioral signals to recognize your trusted devices, detect suspicious login attempts from unfamiliar locations or devices, and trigger additional verification when needed.
  • We perform daily backups and monitor our systems continuously.
  • Access to sensitive data is restricted to authorized staff only.

However, no system is 100% secure. You are responsible for keeping your own password confidential and for any activity performed from your account.

9. Your Responsibilities

  • Keep your username and password confidential.
  • Enable Two-Factor Authentication (2FA) for additional security.
  • Notify us immediately if you suspect unauthorized access to your account.
  • Be careful about what personal information you share voluntarily in messages, message boards, or emails. Once shared, others may access and use that information.
  • Ensure you have the right to send messages to any recipient numbers you upload into our platform.

10. Children's Privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, or legal requirements. The latest version will always be published on this page with an updated revision date. Continued use of our services after an update constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise rights regarding your data, or need to report a security concern, please contact us:

  • Email: sales@kwtsms.com
  • Phone / WhatsApp: +965 9922-0322
  • Address: Nour Complex, Salmiya, Kuwait