SMS Compliance

Aopy is a marketing platform operated by Easy Life Tech SRL that allows its business customers ("Customers") to send SMS messages to their own contacts. SMS messages are delivered through SMSO.ro, a Romanian SMS provider. This page explains the compliance rules that apply to SMS sent through the platform: consent, opt-out handling, sender identification, sending practices and the data we process in connection with SMS.

This page forms part of our legal framework and applies together with the Terms of Service, the Acceptable Use Policy, the Data Processing Agreement and the Privacy Policy. For SMS marketing, our Customers act as data controllers of their own contact lists, and Aopy acts as a data processor on their behalf.

If you have received an SMS sent through our platform, the sender is the business identified in the message, not Aopy. You can still exercise your opt-out rights directly, as described below.

Marketing SMS may only be sent to recipients who have given prior, explicit consent (opt-in) to receive them. Under the GDPR and Romanian law on privacy in electronic communications (Law no. 506/2004), direct marketing messages sent by SMS require the recipient's prior consent.

Customers who send SMS through the platform must:

• obtain valid consent — specific, informed and freely given — before sending any marketing SMS to a contact;
• keep records of that consent (who consented, when and how) and provide proof of consent to Aopy on request;
• never use purchased, rented, harvested or otherwise unlawfully obtained contact lists;
• act on any withdrawal of consent without delay.

We may request proof of consent at any time. Where consent cannot be demonstrated, or where sending patterns indicate abuse (for example, abnormal complaint rates), we may suspend SMS sending in accordance with the Terms of Service and the Acceptable Use Policy. Practical guidance on collecting valid consent is available in our Data Processing Guidelines.

Every recipient can opt out of SMS marketing at any time, free of charge (only your mobile operator's standard rate for sending the reply may apply), by replying to an SMS received through the platform with either of the following keywords:

• STOP
• DEZABONARE

Opt-out replies are processed automatically through our SMS provider: the contact is marked as opted out of SMS and is excluded from future SMS marketing sends through the platform.

So that the opt-out continues to be honoured even if a contact record is later deleted and re-imported, the phone number is normalised to the international (E.164) format and recorded on a suppression list as a SHA-256 hash — the suppression list does not store the phone number in readable form.

Customers must also honour opt-out requests received through any other channel (email, phone, in writing) and must never re-subscribe an opted-out contact to SMS without new, explicit consent.

Every SMS sent through the platform carries a sender identifier so that recipients can tell who is contacting them. Sender identifiers are provisioned through our Romanian SMS provider in line with the requirements of ANCOM (Autoritatea Națională pentru Administrare și Reglementare în Comunicații), the Romanian regulatory authority for communications.

Customers must use truthful sender identification that corresponds to their own business. Misleading sender identities, or identities that impersonate another person or organisation, are prohibited under the Acceptable Use Policy.

All SMS marketing sent through the platform must follow these rules:

• Consent first — marketing SMS may only be sent to recipients who have opted in, as described above.
• Clear identification — the message and its sender identifier must make clear which business is sending it.
• Working opt-out — recipients must always be able to opt out by replying STOP or DEZABONARE, and Customers should inform their audience of this option.
• Reasonable hours — messages should be sent at hours reasonable for the audience; night-time marketing sends should be avoided.
• Lawful content — no illegal, deceptive, fraudulent or otherwise prohibited content; the full list of prohibited content and conduct is set out in the Acceptable Use Policy.

Violations of these rules may lead to suspension or termination of SMS sending, in accordance with the Terms of Service and the Acceptable Use Policy.

When SMS features are used, the platform processes the following data:

• phone numbers of contacts uploaded by the Customer (the Customer remains the controller of this data);
• the content of SMS messages;
• delivery receipts (the delivery status of each message);
• inbound opt-out replies (STOP / DEZABONARE) and the resulting opt-out status;
• phone numbers in hashed form (SHA-256) on the SMS suppression list.

SMS delivery is performed by SMSO.ro in Romania (EU) — see our sub-processor register. For details on how personal data is processed and protected, see the Privacy Policy and the Data Processing Agreement.

For data protection questions or requests relating to SMS, contact us at privacy@aopy.com. You may also use our data deletion and data export request forms.

To report unsolicited SMS sent through our platform, write to support@aopy.com and include, where possible, the sender identifier, the date and time, and the content of the message.

You also have the right to lodge a complaint with the Romanian data protection authority — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, Romania, www.dataprotection.ro — for matters concerning personal data, and to contact ANCOM, www.ancom.ro, for matters concerning electronic communications.

This SMS Compliance page is available in English and in Romanian. In the event of any inconsistency or discrepancy between the two versions, the English version prevails.