← Tuma SMS - Nei Shot

Privacy Policy

Last updated: 29 April 2026 · Version 1.0

This Privacy Policy explains how NEI SHOT WEBX SOLUTIONS CC (CC/2025/02042), trading as Tuma SMS ("we", "us", "our"), collects, uses, stores and shares personal information when you use the Tuma SMS - Nei Shot platform at https://tumasms.online.

We process personal information in accordance with the Namibian Data Protection Bill / POPIA principles, the Communications Act, 2009 (Act No. 8 of 2009), and applicable EU GDPR principles where they apply to international users.

Contents 1. Who we are 2. Information we collect 3. How and why we use it 4. Legal basis 5. Sharing & sub-processors 6. Retention 7. Your rights 8. Security 9. International transfers 10. Children 11. Changes to this policy 12. Contact us

1. Who we are

NEI SHOT WEBX SOLUTIONS CC is a close corporation registered in Namibia (CC/2025/02042). Our registered address is Windhoek, Khomas Region, Namibia.

We are the "responsible party" (POPIA) / "data controller" (GDPR) for information we collect about account users (people who sign in to operate a tenant workspace). For information about recipients of messages our customers send through the platform, our customers are the responsible party and we act as "operator" / "processor". The Data Processing Agreement at https://tumasms.online/legal/dpa governs that relationship.

2. Information we collect

2.1 Account information

  • Name, email address, phone number, password hash, role assignments.
  • Tenant (workspace) name, slug, status.
  • Billing details: invoices, payment status, allocated credits, transactions.

2.2 Usage information

  • Login timestamps, IP address, browser user-agent, audit log of sensitive actions.
  • API key identifiers (we never store the secret in plaintext after creation).
  • Operational metrics: messages sent/delivered/failed, bounce rates, open rates.

2.3 Recipient information uploaded by our customers

  • Phone numbers (canonical 264XXXXXXXXX), email addresses, names, optional custom fields.
  • Group / list membership, opt-in source, opt-out timestamp, suppression reason.
  • Delivery records of messages sent to that recipient.

2.4 Cookies & local storage

Session cookie, CSRF token, locale cookie (tuma_locale), and a one-shot cookie-acknowledgement marker (tuma_cookie_ack). See our Cookie Notice for the full list.

3. How and why we use it

PurposeCategories used
Authenticate you and run your workspaceAccount, usage
Send the SMS / email campaigns you instruct us to sendRecipient, account
Bill, invoice, and reconcile your usageAccount, usage
Investigate abuse, security incidents, and policy violationsAccount, usage, audit
Comply with lawful requests from regulators or carriersAccount, usage, recipient
Improve product reliability (aggregate, non-identifying)Usage

4. Legal basis

We process your personal information on the basis of: (a) the contract between you and us; (b) our legitimate interests in operating, securing and improving the platform; (c) compliance with legal obligations; and (d) your consent where consent is the appropriate basis (e.g. marketing emails sent by us to you).

5. Sharing & sub-processors

We share information only with the parties strictly required to deliver the service:

Sub-processorPurposeRegion
Clickatell (and fallback MTC ConnectSMS)SMS delivery to mobile networksSouth Africa / Namibia
Brevo (Sendinblue)Transactional + bulk email deliveryEU
Cloud hosting providerCompute, storage, database, backupsEU / SA
SentryError and performance monitoringUS (DPA in place)

An up-to-date sub-processor list is available on request to privacy@tumasms.online.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

6. Retention

We keep personal information only as long as needed for the purpose it was collected:

Data categoryRetention
Sent messages (SMS & email content)365 days
Delivery / status logs365 days
Audit logs730 days
Inactive tenant accounts365 days from last activity, after which the data is anonymised or deleted
Support tickets730 days
Backups3 most-recent rolling local backups (older are overwritten)

7. Your rights

You may, at any time:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your account and associated data (subject to legal retention obligations);
  • Object to certain processing or withdraw consent previously given;
  • Receive a structured, machine-readable copy of your data (data portability - exposed at /ui/tenant/contacts/{id}/data-export for recipients you control);
  • Lodge a complaint with the Namibian Information Regulator (or the Information Regulator of South Africa for POPIA-comparable matters).

To exercise any right, email privacy@tumasms.online. We aim to respond within 30 calendar days.

8. Security

We protect personal information using:

  • TLS 1.2+ for all data in transit.
  • Encrypted-at-rest backups.
  • Argon2id / bcrypt password hashing.
  • Per-tenant data isolation in the database.
  • Audit logging of sensitive actions.
  • Webhook signing (HMAC-SHA256) for outbound delivery callbacks.
  • Rate limiting on the API and authentication endpoints.
  • Soft-deletes on user-facing records to enable recovery from accidental deletion.

No system is perfectly secure. If you suspect a security incident, please email privacy@tumasms.online.

9. International transfers

Some of our sub-processors operate outside Namibia. Where we transfer personal information across borders, we rely on standard contractual safeguards and the recipient's compliance with GDPR or equivalent.

10. Children

The Tuma SMS - Nei Shot platform is not directed at persons under the age of 18. We do not knowingly collect personal information from children. If you believe a child has used the platform, contact us and we will delete the relevant information.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active account owners by email.

12. Contact us

NEI SHOT WEBX SOLUTIONS CC
Windhoek, Khomas Region
Namibia
Privacy: privacy@tumasms.online
Support: support@tumasms.online
Phone / WhatsApp: +264 85 798 3217

Privacy Terms Acceptable Use DPA Cookies © 2026 NEI SHOT WEBX SOLUTIONS CC