1. Information We Collect

Account Information

We collect limited personal information from you during account creation. You may create an account using either:

• Google Sign-In: Your email address, profile picture, and display name are collected through Google authentication.
• Email/Password Registration: Your email address and encrypted password are collected when you sign up directly with Shield Message.

This information is collected solely for account creation, authentication, and service delivery.

Message Content

When you create shield messages, you provide us with message content including recipient information (name and email), message subject, message body, and deadman switch duration settings. This content is stored securely in our database and is only accessed by our automated systems for the purpose of delivering your messages.

Check-In Data

We automatically record timestamps when you check in to reset your deadman switch timer. This data is essential for the proper functioning of the failsafe message delivery system.

Automatically Collected Information

We may automatically collect certain information when you visit our website, including your browser type, operating system, IP address, and browsing behavior. This information is used for security, analytics, and improving website performance.

2. Use of Information

Shield Message uses your information solely for platform functionality. We use your information for the following purposes:

• Account Authentication: Your email address and authentication credentials (Google account or email/password) are used to create, secure, and maintain your account
• Message Delivery: Your stored messages and recipient information are used to deliver shield messages according to your deadman switch settings
• Check-In Monitoring: Your check-in timestamps are monitored to determine when to send your shield messages
• Email Notifications: We send emails to your designated recipients when your deadman switch timer expires

All messages stored in our database can be deleted at any time through your account dashboard. To request complete account deletion and removal from our system, please contact us at contact@shieldmessage.com with the subject line "Account Deletion Request." We do not share, sell, or distribute your personal information or message content to third parties except as necessary to deliver your messages (via our email service provider).

3. Data Security and Encryption

We utilize enterprise-grade encryption provided by Microsoft Azure for database storage and Google Firebase for authentication services to protect your personal information and message content. All user data and messages are encrypted both at rest and in transit:

• Encryption at Rest: All personal information, message content, and account data stored in our databases are encrypted using encryption algorithms to protect against unauthorized access.
• Encryption in Transit: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (HTTPS) to prevent interception or tampering during transmission.
• Access Controls: Message content is only accessed by our automated systems for the purpose of scheduled delivery. We maintain strict access controls to ensure your data remains private and secure.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Message Delivery and Third-Party Services

Shield Message uses third-party service providers to deliver your shield messages:

• Email Delivery (Resend): When your deadman switch timer expires, your message content and recipient email addresses are transmitted to our email service provider solely for the purpose of delivery.
• SMS Delivery (Twilio): For premium users, SMS messages and recipient phone numbers are transmitted to our SMS service provider for text message delivery when your deadman switch timer expires.

We do not store or share your message content with any other third parties beyond what is necessary for delivery.

5. SMS Messaging and Recipient Consent

Shield Message takes SMS consent and TCPA (Telephone Consumer Protection Act) compliance very seriously. Our SMS service operates under a strict double opt-in process to ensure recipients explicitly consent before receiving any automated messages.

How SMS Opt-In Works

When you designate a phone number as a recipient for SMS delivery:

• Initial Invitation Only: The recipient receives a single invitation message explaining the service and how to opt in. This is the only message sent without their consent.
• Explicit Consent Required: Recipients must reply "YES" to explicitly opt in to receive failsafe messages. No automated messages are delivered until this consent is provided.
• Consent Verification: The recipient's "YES" response is logged with a timestamp for compliance verification.
• Easy Opt-Out: Recipients can opt out at any time by replying "STOP" and will be immediately removed from the messaging list.

Recipient Information Storage

When you provide a recipient's phone number:

• The phone number is stored securely in our encrypted database
• Consent status (opted in/opted out) is tracked and enforced
• The number is only used for delivering your failsafe messages
• Numbers are never sold, shared, or used for marketing purposes
• Recipients can request deletion of their information at any time

For complete details about the SMS consent process, workflow, and recipient rights, please see our SMS Consent & Opt-In Information page. This page is also provided to all recipients in their invitation message.

Your Responsibilities as a User

When using our SMS service, you agree to:

• Only provide phone numbers of people who would reasonably expect to receive emergency or important messages from you
• Not use the service for spam, harassment, or unsolicited commercial messages
• Respect recipient opt-out requests and not attempt to re-add recipients who have opted out
• Ensure your message content is appropriate and lawful

Violation of these responsibilities may result in suspension or termination of your account and SMS privileges.

6. Children's Privacy

Our service is not directed at individuals under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at contact@shieldmessage.com, and we will take appropriate steps to remove the information.

7. Data Retention

We retain your account information and message content for as long as your account remains active. Messages marked as "sent" are retained in your account for your records but can be deleted at any time. If you delete a message before it is sent, it is permanently removed from our database. Upon account deletion, all associated messages and personal information are permanently deleted from our systems.

SMS Recipient Data: Recipient phone numbers and consent records are retained as long as the associated message is active. When you delete a message, the recipient data associated with that message is also deleted. If a recipient opts out by replying "STOP", their opt-out status is retained to prevent future unwanted messages.

8. Legal Compliance and Your Rights

We comply with applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Telephone Consumer Protection Act (TCPA). If you are a resident of these regions, you may have specific rights regarding your personal data:

• The right to access your personal data
• The right to correct inaccurate data
• The right to delete your data
• The right to restrict or object to data processing
• The right to data portability

For SMS Recipients: If you are a recipient of SMS messages and wish to exercise any of these rights (such as requesting deletion of your phone number), you can either reply "STOP" to opt out immediately, or contact us at contact@shieldmessage.com with the subject line "SMS Data Rights Request."

To exercise these rights, please contact us at contact@shieldmessage.com.

9. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly to stay informed about how we protect your information.

10. Contact Us

If you have any questions about this Privacy Policy, data deletion requests, SMS consent, or concerns about your personal information, you can contact us at:

Email: contact@shieldmessage.com