Privacy Policy

Last Updated: May 7, 2026

This Privacy Policy describes how Two F Capital PLC ("we," "us," or "our") collects, uses, and protects information when you use the a2p.et SMS gateway service.

1. Information We Collect

• Account Information: We collect your business name, business licenses and business registrations, contact person, email address, physical address (e.g., Bole Sub-City, Addis Ababa), and phone numbers provided during registration.
• Message Data: We process SMS content, recipient phone numbers, and delivery metadata (campaign reports, latency, and delivery status) sent through our gateway.
• Financial Data: Records of top-ups and balance usage.

2. Purpose of Data Processing

We use the collected data to:

• Provide and maintain the SMS gateway service.
• Generate delivery reports and analytics for your account.
• Comply with the Ethiopian Data Protection Proclamation 1321/2024.
• Provide technical support and account management.

3. Data Security

We implement industry-standard security measures to protect data transmitted through our gateway. However, clients are responsible for the security of their own customer data and obtaining necessary recipient consents.

4. Client Responsibility and Roles (Data Controller/Processor)

For all Message Data (SMS content, recipient numbers), the Client is the Data Controller and Two F Capital PLC is the Data Processor. The Client retains sole responsibility for:

• Obtaining explicit, informed, and specific consent from recipients for all messages, in compliance with the Ethiopian Data Protection Proclamation 1321/2024 and anti-spam laws.
• Ensuring all content transmitted through the gateway complies with Ethiopian laws and is not illegal, unlawful, harmful, threatening, or infringing on proprietary rights.
• Indemnifying Two F Capital PLC against any claims, damages, or liabilities arising from the Client's use of the SMS gateway service or non-compliance with applicable laws and regulations.

5. Data Sharing and Localization

We do not share any collected personal or message data with third parties. All data processing and storage are localized within Ethiopia to comply with local regulations.

6. Data Subject Rights and Data Portability

In accordance with Ethiopian law and international data protection standards, you have the right to:

• Request the deletion of personal and sensitive data.
• Request an export of your account data (data portability, e.g., in CSV or Excel format) within 30 days of a written request.
• Access reports on message delivery and failed attempts via your dashboard.
• Object to or request the restriction of processing your data.
• Not to be subject to decisions based solely on automated processing.

7. Data Breach Notification

In the event of a Personal Data breach, we will notify the Ethiopian Communication Authority and affected Data Subjects without undue delay and no later than 72 hours after becoming aware of the breach, in accordance with Proclamation No. 1321/2024.

8. Data Retention

Upon termination of the agreement, unused SMS balances are forfeited. We retain data only as long as necessary to provide the service or comply with legal obligations.