Privacy · Law 18-07

YOUR DATA.
YOUR RIGHTS.

This notice explains the data Bar9 needs to operate Algeria’s SMS service, why it is processed, and the controls available to you.

01

Data controller

Bar9 determines how account, billing, messaging, and service-security data is processed. Contact [email protected] for a privacy request or question.

02

What we process

Account and company details; production-access verification; API credential metadata; recipients, message content and delivery events; OTP session metadata; audience consent evidence; sender-ID documents; billing records; and security telemetry.

03

Why we process it

To provide the contracted messaging service, secure accounts and networks, bill accepted traffic, meet regulatory obligations, prevent abuse, and answer support or rights requests.

04

Recipients and security

Authorized staff and configured messaging, email, and payment providers receive only the data required for their function. Bar9 applies access controls, hashed credentials, encrypted transport where supported, audit trails, and bounded retention.

Published retention periods

Configured production periods are published directly by the service. A deletion request removes owner-scoped account data earlier unless a legal obligation requires a limited record to remain.

90 days

Raw service telemetry

API requests and provider health samples

365 days

Sensitive message data

Content, recipients, provider identifiers, delivery errors and expired OTP secrets

730 days

Regulatory metadata

Delivery and session records after sensitive fields are redacted

Your rights

You may request information and access, correct inaccurate data, seek erasure or restriction where processing is unlawful, and object for legitimate reasons or to direct marketing. Dashboard exports are immediate; other valid requests are handled without charge, with correction and erasure requests targeted within the statutory ten-day period.

Open profile controls