Your data, and your customers’ data, handled with care.

Ekas (“Ekas,” “we,” “our,” or “us”) helps businesses get their messaging registrations approved — 10DLC, RCS, and toll-free — through compliance checks, remediation, and guided registration delivered over our website, platform, API, MCP, widget, and hosted flows (together, the “Services”).

This Privacy Policy explains what we collect, how we use it, and the choices you have. It covers two kinds of people: the business users who sign up for and operate Ekas, and the individuals whose information may appear inside the registration data our customers process through us. That second category — your customers’ data — is the one people ask about most, so we address it directly in “Customer Data and your end users.”

Ekas plays two roles depending on the data:

• We are the controller for the information we collect to run our own business — account details, billing information, support conversations, and website analytics. This policy governs that data.
• We are a processor (a “service provider” under US privacy law) for the registration data a customer submits through the Services, including any personal information about that customer’s own end users. Our customer decides why and how that data is used; we process it only to deliver the Services and under our agreement with them. If you are an end user of one of our customers, please direct privacy requests to that business, and see Section 04 for how we protect it.

Information you give us

• Account and contact details — name, work email, phone number, and company.
• Billing information — plan, transaction records, and tax details. Card payments are handled by our payment processor; we do not store full card numbers.
• Registration data — the information you submit so we can check and file a registration, such as legal business name, EIN/business identifiers, website, use cases, opt-in flows, sample messages, and contact details. This may include personal information about your end users; we treat all of it as Customer Data.
• Support and other communications you send us.

Information we collect automatically

• Usage and log data — actions in the product, timestamps, referring pages, and approximate location from IP.
• Device and browser data — IP address, browser type, and device identifiers.
• Cookies and similar technologies, described in Section 08.

Information from third parties

We may receive limited business-contact and enrichment data from analytics and sales tools, and status information back from the messaging providers and registries you register with, so we can report the outcome of a submission to you.

“Customer Data” means the data you submit to the Services or that we process on your behalf, including information about your own customers, subscribers, and end users that appears in your registrations. You own it. We handle it under four firm commitments.

We use Customer Data only to provide, secure, and support the Services for you — for example, to run compliance checks, generate recommendations, and file registrations with the provider and registry you choose. To complete a registration, we necessarily transmit the data you give us to that provider and registry; see Section 07.

We use the information described above to:

• Provide, operate, and improve the Services, and check and file your registrations.
• Set up your account, authenticate you, and process billing.
• Provide support and respond to your requests, under the SLA in our Terms.
• Send service and transactional messages, and — where permitted — product updates you can opt out of.
• Monitor, secure, and troubleshoot the Services, and detect abuse or fraud.
• Comply with law and enforce our agreements.

We do not use Customer Data to improve our models or to build features for other customers. Our own product improvement relies on aggregated, de-identified usage metrics that do not identify you or your end users.

The Services use AI and large language models to read a registration, flag likely rejection reasons, and suggest fixes. Two things about how that works:

• No training on your data. Data you submit is used to produce your result and nothing more. Neither Ekas nor our AI sub-processors train or fine-tune models on Customer Data.
• You stay in control. Our recommendations are guidance to help you get approved; they are not legal advice, and you decide what to submit. A rejection outcome is ultimately set by the carrier, registry, or provider.

We share information with vendors who process it on our behalf under contract, and with the parties you direct us to file with. These fall into a few groups:

• Cloud hosting and infrastructure that runs the Services.
• AI and language-model providers used to analyze registrations, under terms that prohibit training on your data.
• Payment processing for billing.
• Product analytics and support tooling (see Section 08).
• Messaging providers, registries, and carriers — for example your CPaaS provider (such as Twilio, Telnyx, Bandwidth, Sinch, or Plivo), The Campaign Registry, and the toll-free and RCS ecosystems — which receive the registration data needed to file and adjudicate your submission.

We do not authorize any of these vendors to use Customer Data for their own purposes. Sharing may also occur in a corporate transaction (such as a merger or acquisition) or where required by law; we will honor the commitments in this policy in any such transfer.

On our website we use cookies and similar technologies for essential functionality and to understand how the site is used. Our current analytics and marketing tools include Google Tag Manager, Microsoft Clarity, HubSpot, and Apollo. These help us measure traffic and improve the site; they are not used to profile the contents of your registrations.

You can control cookies through your browser settings. Blocking some cookies may affect how the site works.

We keep information for as long as needed to provide the Services and for legitimate business or legal reasons.

• Customer Data is retained while your account is active. On a verified deletion request, or on account termination, we delete or de-identify Customer Data from our production systems within 30 days, except where we must retain a limited record to comply with law, resolve disputes, or enforce our agreements. Backups cycle out on a rolling schedule.
• Account and billing records may be kept longer where required for tax, accounting, and legal purposes.

To request deletion, contact us at hello@ekas.io. If you are an end user of one of our customers, ask that business to submit the request; we will act on their instruction.

We use technical and organizational measures appropriate to the data we handle, including encryption in transit and at rest, per-tenant access controls, least-privilege access for our team, and monitoring. No system is perfectly secure, but protecting the data you entrust to us is a core design goal, not an afterthought.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Because we do not sell personal information or use it for cross-context behavioral advertising, there is nothing to opt out of on that front.

To exercise a right, email hello@ekas.io. We will verify and respond as required by applicable law, and we will not discriminate against you for exercising a right. For Customer Data we process on a customer’s behalf, we forward requests to that customer and act on their instructions.

We may process and store information in countries other than where you are located. When we transfer personal data across borders, we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.

The Services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice. Continuing to use the Services after an update means you accept the revised policy.

Questions about this policy or your data? Email us at hello@ekas.io and we will help.