Privacy Policy

We are an independent A2P 10DLC and carrier compliance practice operated from Bangalore, India, serving business clients. This policy covers a2pworks.com and the work we do for clients.

Who we are

A2P Works, operated by Sai Sujan Sridhara and Rohan MR, Bangalore, India. Contact: privacy@a2pworks.com.

What we collect

When you book a call. Name, email, company, and the answers you give on the booking form, including your Twilio account SID, registration type, rejection text or error code, message volume, and website. Booking is handled by Cal.com, which processes this on our behalf.

When you complete an intake form. The business, registration, consent and architecture details listed on the form. We ask for your rejection text verbatim because the wording identifies the rule that fired.

When you email us. Whatever you send, and your email address.

When you visit the site. Standard server request data. We do not run advertising trackers, we do not sell data, and we do not build profiles for marketing.

What we do not collect

We do not want your end users' personal data. Do not send us message logs containing recipient phone numbers or personal information. Where you send them anyway, we delete them when the engagement closes.

Why we hold it

To answer your enquiry, diagnose your registration problem, deliver an engagement you have signed, invoice you, and meet our own record keeping obligations under Indian tax and foreign exchange law.

Credentials

Where an engagement needs access to your Twilio account we ask for a read only API key scoped to the relevant subaccount, never a master auth token. We hold it in a password manager, log it with an expiry, use it only for your engagement, revoke it on the day the engagement closes, and confirm revocation to you in writing. If we suspect exposure we revoke first and tell you the same business day.

Who we share it with

Only where necessary to do the work:

• Cal.com, for booking
• Skydo, for invoicing and payment
• Our email and file storage providers
• Twilio, only to the extent your engagement requires a submission on your account
• Our accountant and, where required, a regulator or bank

We do not sell personal data and we do not share it for anyone else's marketing.

Where it goes

We operate from India. If you are outside India, your information is processed in India and in the regions our service providers operate.

How long we keep it

Enquiries that do not become engagements: deleted within twelve months. Engagement records, invoices and export documentation: for as long as Indian tax and foreign exchange law requires. Client credentials: revoked and deleted at engagement close.

Your choices

Ask us what we hold, ask for a correction, ask for deletion where we are not required to keep it, or ask us to stop contacting you. Email privacy@a2pworks.com and we will answer within thirty days.

Every marketing email we send carries a working unsubscribe. We honour it within ten business days and usually the same day.

Changes

We will change the date at the top when we update this. Material changes will be flagged on the page.