FAQ

While registering for our product/services we request you to provide us with such information like the first name, last name, company business name, address, website address, email address. This is the basic data of yours that we process and store. We also store Billing contact (email address), Billing address, shipping address, Contact number for billing, Point Of Contact for rest of the conversation (Name, email, phone), address of the company as well as any additional address to whom invoice needs to be communicated.
We also store SMS data that is SMS content and phone numbers.
All information stored is in encrypted format. Along with the business related data,  account related information, such as customer id, company and fields is also stored.
You can find a full description of the data processing practices in our Privacy Policy: https://www.smsmagica.com/privacy-policy/

Regardless of being a data controller or a data processor, when you transfer the personal data to us (and you do so using our services) you may need to enter into a Data Processing Agreement (DPA) with us if you are transferring any EU citizens personal data.

Yes. We understand the GDPR has robust requirements and obligations for both data collectors and data processors and we are committed to helping our customers use screen magic in a compliant manner. We have made our DPA available online so that our customers can be confident that their data is processed in a lawful manner.

The European Commission has a website with guidance for its citizens on GDPR.

Yes. Screen Magic chose to leverage standard encryption to demonstrate their security measures and to serve as an additional layer of precaution against a data breach.

Screen Magic personnel do not have access to our customers’ Salesforce org. Our customer support agents may need temporary access to a customer’s org for troubleshooting or setting up the SMS-Magic platform. Our support agent will only access a customer’s Salesforce org after receiving explicit consent from the customer via email. Customers are recommended to give limited profile access which is only needed for setup and troubleshooting purposes.

The SMS-Magic platform has API access to our customers’ Salesforce org, which is used programmatically for updating SMS transaction data in the customer’s Salesforce org and retrieving SMS aggregate data for quality checks. This API access is granted using OAuth by a particular user of the customer’s org. The SMS-Magic platform will have the same access level as the OAuth user but the platform only accesses SMS-Magic objects. It’s recommended that customers only grant limited access to SMS-Magic users.

When a person record is deleted in the Screen Magic database, all the associated records are automatically deleted. However, additional steps may need to be taken in order to delete the personal data from other fields, like calendar events, tasks.

Yes, Screen Magic has a data centre in Europe hosted with Amazon AWS in Dublin, Ireland. If you are an existing EU customer of Screen-Magic, you can place a request to move your data from our US data centre to our Europe data centre.

Screen Magic has defined policy for data retention as well as deletion. Customer data is retained for the period of 6 months after which it is archived.
To delete data, customer has to send out a data deletion request to security@screen-magic.com . Once proper authentication of the request is completed, the data will be completely erased from the Screen Magic server.

For SFDC, we have an opt-out and opt-in mechanism you can use.

If you are using our portal to send SMS, you can use the subscription feature to manage customer consent.
You can get in touch with our customer support at https://www.smsmagica.com/support/.

For any data handling related queries, you can reach out via email to data-protection-officer@screen-magic.com